Big deal Quote by Bruce Schneier
“Microsoft made a big deal about Windows NT getting a C2 security rating. They were much less forthcoming with the fact that this rating only applied if the computer was not attached to a network and had no network card, and had its floppy drive epoxied shut, and was running on a Compaq 386. Solaris's C2 rating was just as silly.”
About This Quote
Source Article: Security Risks of C2 Ratings, 1995
The C2 rating was meaningless because it only applied under unrealistic, isolated conditions.
In simple terms: C2 rating was unrealistic.
Key Takeaway
Question real-world security.
Themes
security
risk assessment
technology
Mood
critical
skeptical
Type
technical
analytical
When to use this quote
- IT procurement
- risk management
- policy development
Key Concepts
security standards
network isolation
hardware constraints
Questions to Reflect On
- Do you rely on certifications without testing?
- How can security be evaluated realistically?
A Different Perspective
Ratings can give false confidence and ignore practical threats.
![“Like IBM, the company [Microsoft] seems to have been spooked by the federal antitrust action against it and became increasingly sclerotic and less inventive.” quote by Stephen Manes](https://sms4smile.com/quotes/img-quotes/e99/stephen-manes-68173_action_like-ibm-the-company-microsoft-seems-to_393470.jpg)
![“The real targets of terrorism are the rest of us: the billions of us who are not killed but are terrorized because of the killing. The real point of terrorism is not the act itself, but our reaction to the act. And we're doing exactly what the terrorists want [...] Our politicians help the…” quote by Bruce Schneier](https://sms4smile.com/quotes/img-quotes/786/bruce-schneier-8231_billions_the-real-targets-of-terrorism-are-the-re_114892.jpg)
