Satya's blog - Discussing security on IRC

Years ago, sometime around 1999, I used to hang out on IRC. I was pretty green then, and so was the PC security field. Someone advocated not using a firewall unless you have stuff you really wnat to secure or unless you think you'll be attacked. Of course, now if you don't have a firewall you *will* be attacked -- your Windows machines will become zombies, and all your boxes will have their ssh ports tried several times a day.

Someone also said that telnet is insecure if you have a weak password. Now we know that telnet is insecure unless on a private subnet -- even then I wouldn't. Things sure have changed.