"When will the 2013 list be published? Last year's list was out by the end of February. We're well into March now. Have I overlooked it somehow?"
- Don Faulkner
"I agree that for now antivirus is still needed on most platforms, especially the desktop of the average user. The day is fast approaching, however, where today's antivirus will be outmatched. Recent work in advanced malware, including gadget-based systems like Frankenstein, make it clear that AV will have an ever harder time identifying a block of malicious code, while malware authors have an ever expanding toolbox to work with. Marcus Ranum calls this "Enumerating Badness," and gives very good reasons for why we shouldn't do it. Antivirus has survived this long because the alternative has been perceived as harder."
- Don Faulkner
"It's a shame to hear such negativity about the CISSP and its companion certifications. I've held a CISSP for over a decade. At the time that I wrote my exam, it was highly regarded. I think it still should be, although I can't comment on the current state of the exam. The risk with any certification body that makes a living off membership is that it's to the body's advantage to have more members, because dues = revenue. We, the members, must always be on guard against that attitude. Someone once asked why those who pass the exam are not told their score. "What do you call the person who graduated last in his class at medical school? Doctor." In some sense, all licensing and certification is a minimum competency test. When as a teenager I passed my driver's test, I was by no means an expert driver. The examiner was simply reasonably confident that I wasn't going to do something stupid, and I had met the minimum bar. I do not have a commercial license and I'm not a race car driver...."
- Don Faulkner