“Security is kind of like, 'I feel I can trust that things are okay.' Resilience is where you make the assumption the attacker is present—where, when the attacker is present, you control the blast radius,”

John Walsh · said date not stated · reported 2026-10-18

Walsh distinguished between security, which assumes things are okay, and resilience, which assumes an attacker is already present.