Today the San Jose Mercury News asked several prominent security experts which security products they were actually using for their own data. An anonymous Slashdot reader writes:
The EFF’s chief technologist revealed that he doesn’t run an anti-virus program, partly because he’s using Linux, and partly because he feels anti-virus software creates a false sense of security. (“I don’t like to get complacent and rely on it in any way…”) He does regularly encrypt his e-mail, “but he doesn’t recommend that average users scramble their email, because he thinks the encryption software is just too difficult to use.”
The newspaper also interviewed security expert Eugene Spafford, who rarely updates the operating system on one of his computers — because it’s not connected to the internet — and sometimes even accesses his files with a virtual machine, which he then deletes when he’s done. His home router is equipped with a firewall device, and “he’s developed some tools in his research center that he uses to try to detect security problems,” according to the article. “There are some additional things I do,” Spafford added, telling the reporter that “I’m not going to give details of all of them, because that doesn’t help me.”
Bruce Schneier had a similar answer. When the reporter asked how he protected his data, Schneier wouldn’t tell them, adding “I’m kind of a target…”
Read more of this story at Slashdot.