You’ve probably seen the meme. Or maybe you remember the pilot of Battlestar Galactica. The human race is wiped out by a devastating cyberattack on their modern, networked systems. Who survives? The outdated, clunky, decades-old spaceship that isn’t plugged into the network.
It’s a comforting thought. We look at MS-DOS, celebrating 45 years without a remote hole in the default install, and we think: they don’t make them like they used to. We romanticize magnetic tape and 1980s VAX systems. We convince ourselves that the tech of our past was built tougher, simpler, and without the bloated vulnerabilities of modern code.
We don’t revere old technology because it’s secure; we revere it because it’s too economically irrelevant to attack.
The truth is far less romantic. Old tech isn’t a fortress. It’s an abandoned house in the woods. Sure, the doors are unlocked, but nobody breaks in because there’s nothing inside to steal. The moment you drag that abandoned house into a busy city center, it gets looted before sundown.
I saw this firsthand when a datacenter running an emulated VAX thought it was safe relying on the legacy security of OpenVMS. They were wrong. An ancient local root hole was sitting there, waiting. They assumed outdated meant impenetrable. Instead, they were betting their security on the fact that nobody had bothered to look closely at their ancient system in decades.
Security through obscurity is just security through neglect. The moment you shine a spotlight on it, the rot shows.
The same qualities that make old tech seem safe—obscurity, isolation, and simplicity—are exactly what make it obsolete. To be useful today, systems must be connected. And connectivity destroys the very isolation that kept that legacy system safe.
Think about our critical infrastructure. Water plants. Power grids. They’re running on ancient code, and we’re plugging them directly into modern networks. We assume the old software will act as a shield. It won’t. When you connect a decades-old system to the internet, its age becomes a massive liability, not a defense.
The real lesson from Battlestar Galactica wasn’t that old software is better. The lesson was that critical systems shouldn’t be on the network unnecessarily. Air-gapping is the actual defense. Nostalgia for a simpler, hack-proof digital past is an illusion created by disconnection.
The choice was never old versus new. It was connected versus isolated. If you assume outdated means impenetrable, you’re betting your survival on the hope that no one ever looks your way.
Stop trusting old tech just because it hasn’t been breached yet. It hasn’t been breached because it hasn’t been targeted. The moment it is, the illusion shatters, and the betrayal will be absolute.
FAQ
Q: But MS-DOS literally has no remote holes after 45 years. How is that not safer?
A: It is safer only in the context of a default, offline install. The moment you write a modern network driver for MS-DOS and expose it to the internet, those 45 years of unpatched vulnerabilities will destroy you instantly.
Q: What should we do with legacy infrastructure then?
A: Air-gap it. If it absolutely must be connected to modern networks, put it behind aggressive, modern firewalls and accept that the legacy code itself provides zero security.
Q: So nostalgia for old tech is completely useless?
A: Yes, for security. Nostalgia makes you lower your guard. You don't trust a system because it's old; you trust a system because it's isolated and well-designed for its specific threat model.