Microsoft made a big deal about Windows NT getting a C2…
“Microsoft made a big deal about Windows NT getting a C2 security rating. They were much less forthcoming with the fact that this rating only applied if the computer was not attached to a network and had no network card, and had its floppy drive epoxied shut, and was running on a Compaq 386. Solaris's C2 rating was just as silly.”
About This Quote
This interpretation was drafted with AI assistance. It is one reading of the quote, not the author's own explanation.
The C2 rating was meaningless because it only applied under unrealistic, isolated conditions.
In simple terms: C2 rating was unrealistic.
Key Takeaway
Question real-world security.
Themes
security
risk assessment
technology
Mood
critical
skeptical
Type
technical
analytical
When to use this quote
- IT procurement
- risk management
- policy development
Key Concepts
security standards
network isolation
hardware constraints
Questions to Reflect On
- Do you rely on certifications without testing?
- How can security be evaluated realistically?
A Different Perspective
Ratings can give false confidence and ignore practical threats.