The process of security

“Security is a process, not a product. Products provide some protection, but the only way to effectively do business in an insecure world is to put processes in place that recognize the inherent insecurity in the products.” Bruce Schneier acknowledges that perfect computer security probably doesn’t exist. He reminds us that we need to understand our risk of exposure in order to be able to manage it.
www.schneier.com

Trust the process, Tina!

What the Tamiflu saga tells us about drug trials and big pharma

“And so, paradoxically, after everything you have read above, with the outrage fresh in your mind, on the day when it feels harder than any other, I hope you will join me in saying: Bravo, Roche. Now let’s do better.” Ben Goldacre highlights the deficiencies of a regulatory system which governs the approval of pharmaceutical drugs.
www.theguardian.com