Tuesday, March 17, 2009

Bruce Schneier Talks about security

(http://antbsd.twbbs.org/~ant/wordpress/?p=980, December 18th, 2007)

Here has a great talk about security. Talker is Bruce Schneier, I hope everybody can read it repeatedly, because it’ll make some changes on you.

Security vs. Complexity

Complexity is the worst enemy of security; as systems become more complex, they get less secure. It’s not the addition of wireless per se; it’s the complexity that wireless — and everything else — adds.

About security,

Security is a trade-off, just like anything else. And it’s not true that we always disproportionately value other things before security. Look at our terrorism policies; when we’re scared, we value security disproportionately before all other things. Looking at security through the lens of economics (as I did here) is the only way to understand how these motivations work and what level of security is optimal for society. Not that I’m discouraging you from picking up your digital pitchforks. People have an incredibly complex relationship with security — read my essay on the psychology of security, and this one on why people are so bad at judging risks — and the more information they have, the better.

Haha, yes, yes,

the complexity of passwords an average person is willing to remember is less than the complexity of passwords necessary to be secure against a password-guessing attack.

Cool, security vs. shared minds,

I run an open wireless network at home. There’s no password, and there’s no encryption. Honestly, I think it’s just polite. Why should I care if someone on the block steals wireless access from me? When my wireless router broke last month, I used a neighbor’s access until I replaced it.

No comments:

Post a Comment