brianpuccio.net

it's dot com

You Don't Need To Give Up Privacy For Security

Date: Wednesday, February 13, 2008 - 9:43am
Keywords: war on terror, security theater, Bruce Schneier, freedom to privacy

Security and privacy are not opposite ends of a seesaw; you don't have to accept less of one to get more of the other. Think of a door lock, a burglar alarm and a tall fence. Think of guns, anti-counterfeiting measures on currency and that dumb liquid ban at airports. Security affects privacy only when it's based on identity, and there are limitations to that sort of approach.

Since 9/11, approximately three things have potentially improved airline security: reinforcing the cockpit doors, passengers realizing they have to fight back and -- possibly -- sky marshals. Everything else -- all the security measures that affect privacy -- is just security theater and a waste of effort.

And a waste of money.

It's Tor, Not TOR

Date: Wednesday, December 5, 2007 - 11:59am
Keywords: Tor, Bruce Schneier, anonymity, funny

No TOR destinations are hidden from Bruce Schneier.

Bad Security

Date: Monday, October 8, 2007 - 12:29pm
Keywords: security theater, Bruce Schneier, ignorance of technology, George Akerlof

Why are there so many bad security products out there? It's not just that designing good security is hard -- although it is -- and it's not just that anyone can design a security product that he himself cannot break. Why do mediocre security products beat the good ones in the marketplace?

In 1970, American economist George Akerlof wrote a paper called "The Market for 'Lemons'" (abstract and article for pay here), which established asymmetrical information theory. He eventually won a Nobel Prize for his work, which looks at markets where the seller knows a lot more about the product than the buyer.

This is just yet another piece of proof that technology has infiltrated our lives on every level and those who chose to ignore it and bury their heads in the sand just make matters worse, not just for them, but for everyone involved. Ignorance should not be an excuse, especially where so many people in the technology field make special efforts that this information be available freely to anyone (open source software, copyleft, wikipedia, OLPC, MIT's open courseware, etc, etc).

Syndicate

Syndicate content

User login