Time to simply give up on data security?

[cjolley]

Hackers once stole a casino's high-roller database through a thermometer in the lobby fish tank

http://www.businessinsider.com/hackers-stole-a-casinos-database-through-a-thermometer-in-the-lobby-fish-tank-2018-4

[Jammrock]

This is the price of the rapid pace of technological progress. As the companies push to release builds and features out faster, or to push products out that aren't feature complete or secured, we will continue to see problems like this.

IoT is the biggest weakness in the security chain right now because you have companies out there with no clue on how to make a secured networking product releasing "smart" devices. They thinking slapping a vanilla on OS on a cheap board will magically be secure. Surprise, it's not.

There will be a day, in the very near future, where you will have top down encryption. And when I say top down I mean memory, storage, CPU transactions, network communication, and multi factor authentication (MFA)... everything locked down. We're well on the way.

The Spectre and Meltdown hacks were the lightbulb moment for what hackers have known for a long time. Nothing is perfectly secure anymore. The entire way we think about computing needs to change to fix it or it never will be.

[cjolley]

The entire way we think about computing needs to change to fix it or it never will be.

I'd like them to use Moore's law to create an OS that looks as sophisticated as Win98, but is actually secure.
No shortcuts. Real bounds checking EVERYWHERE. Real permission rings without holes so it will run better. The computing power is there.

[UtwigMU]

It exists. Enable SeLinux on Centos and configure policies accordingly.

I talked to an admin from the course I taught, who works at highly security sensitive organization. The only thing that goes out is that the organization puts data on another internal ftp. No connection to outside world.