Almost all exploits are simple mistakes.

Almost all exploits are simple mistakes.

Humans make mistakes. Programmers are bound to make mistakes. Hackers, you can bet your life, are going to be there to exploit those mistakes.

The security world needs to take a more proactive approach. A lot of companies will know an exploit exists and they'll release the software anyways, and the patch later on. Stuff like this needs to stop. There needs to be some kind of agency that verifies code before it's released, maybe a grading system for code.

Back in my era, hacking was all about messing with other hackers. It was a hacker war.

A lot of hackers set up scam sites. They can impersonate a site like PayPal, for instance.

I have done conferences explaining that cloud is a bad idea. It's putting all your eggs in one basket.