Mitigation strategy
Posted Feb 2, 2008 12:19 UTC (Sat) by
man_ls (subscriber, #15091)
In reply to:
Mitigation strategy by ikm
Parent article:
LCA: Bruce Schneier on the two sides of security
Not sure what you mean, but this has nothing to do with being dependent. What is really news is that we are so bad at evaluating danger. Schneier has posted innumerable examples, let me give you one more: many people are afraid of elevators, and certainly every time an elevator hits a small bump we all shudder. However, the rational risk is close to null: how many people do you know have died in an elevator? The annual death toll is ludicrous.
If we were completely rational we would shudder every time we got into a car -- a lot of people die every day in one of those. Our physical ways of evaluating danger are fit for a bunch of monkeys wandering in a savannah, but so outdated for today's world that they are funny. (In fact there is a whole sector of the economy based on this fact: amusement parks, where you feel fear for fun.)
You can thus imagine how well suited people are to evaluate computer dangers: very badly. Extensive training and experience is required just to perform rational assessments.
(
Log in to post comments)