Succinctly put!

Just read a presentation that very succinctly put why I'm so pessimistic about security. Way too much press goes to the trivial, easy attacks with little to no sophistication. Ofcourse this by design as the professionals simply don't indulge in the type of behavior that makes script kiddies famous. About the only caveat I have to the presentation is that in most cases their success is predicated on one of two things, either having the talent in house to be able to break in, or access to specialized attack tool chains. It is possible, albeit not probable, that in some cases the in house talent might refuse (if they knew!) to break in on behalf of a nefarious entity. That's about the only hope you have against the real pro's.