I hate the term "zero trust" for the same reason as I hate the term "security hygiene" - I absolutely 100% agree with the practice, yet think the term is totally misleading and that it's constantly misrepresented to sell marketing FUD.
You're still trusting shit. Just stop.
You're not brushing your network's teeth. Just stop.
Is every industry as bad at buzzwords as we are?
A good test for a vendor who bandies about either of those terms is to ask the salespeople to define them. Can they break both down into practical daily security concepts like “least privilege”, “network segmentation”, “access management”, “asset inventory”, and so forth?
Anyway you’re always welcome to disagree. I welcome the debate. Just my two cents and reasoning.
You can follow @hacks4pancakes.
Tip: mention @twtextapp on a Twitter thread with the keyword “unroll” to get a link to it.

Latest Threads Unrolled:

By continuing to use the site, you are consenting to the use of cookies as explained in our Cookie Policy to improve your experience.