Cyber terrorism: it does not exist. There are no – repeat, zero – documented incidents of cyber-terrorism. The idea that al-Qaeda will use virtual reality technology to train terrorists here in America (which I heard today) is simply ludicrous. Bin Laden didn’t even use e-mail! And anyone who’s tried streaming Hulu over a wireless connection will appreciate just how hard it is to use high-bandwidth apps even in a broadband environment.
via Info/Law, Cybersecurity Theory and Myths.
Cyber-security purveyors are certainly relying on an over-hyped threat model. That’s how you get funding. But doesn’t the Stuxnet worm suggest that there are other sorts of cyber-terrorism that might be practicable? And if Stuxnet was launched by a government, as some suspect, can we really say there’s never been any cyber-terrorism? Perhaps, because then it counts as an act of war by a nation-state, not terrorism as such.
Go read the rest — the other three top myths seem right on target.