|
|
Subscribe / Log in / New account

Security quotes of the week

But we really did use to use ROT13 a lot. We used it to keep secrets. And it worked.

Why it worked is a fascinating look at all the different meanings that "security" has.

ROT13 was once a mainstay of online conversations on Usenet and message boards.

It was essential to joke forums (where it was used to scramble punchlines) and media forums (where it was used to scramble spoilers).

You see, "security" doesn't exist in the abstract. Every security measure is a counter to a threat.

[...] The threat that ROT13 defended against was…you. It was a way to prevent you from accidentally reading something you didn't want to know – a counter to your haste and/or curiosity.

Cory Doctorow

But ‘if you build it, they will come’. If device vendors are compelled to install remote surveillance, the demands will start to roll in. Who could possibly be so cold-hearted as to argue against the system being extended to search for missing children? Then President Xi will want to know who has photos of the Dalai Lama, or of men standing in front of tanks; and copyright lawyers will get court orders blocking whatever they claim infringes their clients’ rights. Our phones, which have grown into extensions of our intimate private space, will be ours no more; they will be private no more; and we will all be less secure.
Ross Anderson introduces "Bugs in our Pockets: The Risks of Client-Side Scanning"

This is where a competent and responsible government would thank the journalists for finding the vulnerability and disclosing it in an ethical manner designed to protect the info of the people the state failed to properly protect.

But that's not what happened.

[...] And then, it got even worse. Missouri Governor Mike Parson called a press conference in which he again called the journalists hackers and said he had notified prosecutors and the Highway Patrol's Digital Forensic Unit to investigate. Highway Patrol? He also claimed (again) that they had "decoded the HTML source code." That's... not difficult. It's called "view source" and it's built into every damn browser, Governor. It's not hacking. It's not unauthorized.

Mike Masnick

to post comments

Security quotes of the week

Posted Oct 21, 2021 9:04 UTC (Thu) by nim-nim (subscriber, #34454) [Link]

> Our phones, which have grown into extensions of our intimate private space, will be ours no more;

They haven’t been ours for quite a long time. A basic principle of democracy is checks and balances, avoiding concentrating power in a single place.

Making a handful of cloud giants responsible for security choices “because the user can not make educated choices” was always going to fail (it would have failed the same way if you replaced cloud giants by Linux distributions that removed users from security choices, the decision process needs to be kept distributed otherwise it is ripe for takeover).

Security quotes of the week

Posted Oct 21, 2021 11:37 UTC (Thu) by PengZheng (subscriber, #108006) [Link] (12 responses)

> Then President Xi will want to know who has photos of the Dalai Lama, or of men standing in front of tanks; and copyright lawyers will get court orders blocking whatever they claim infringes their clients’ rights.

Surprised and disappointed to read the above clueless bull***t in my favorite tech media.

Security quotes of the week

Posted Oct 21, 2021 20:32 UTC (Thu) by jschrod (subscriber, #1646) [Link] (6 responses)

Well, looking at the record of Chinese (successful) attempts to supervise, censor, bully, and detain its citizens that don't behave as Xi wants, even though their activities were legal before -- it seems to be right on the spot.

Just look at the democratic Honk Gong opposition, to get an example.

Security quotes of the week

Posted Oct 22, 2021 2:07 UTC (Fri) by PengZheng (subscriber, #108006) [Link] (5 responses)

> Well, looking at the record of Chinese (successful) attempts to supervise, censor, bully, and detain its citizens that don't behave as Xi wants, even though their activities were legal before -- it seems to be right on the spot.

The record you talk about seems quite absurd from the point of view of Mainland China residents, so to speak.

Security quotes of the week

Posted Oct 24, 2021 7:40 UTC (Sun) by NYKevin (subscriber, #129325) [Link] (4 responses)

China is entitled to its opinion. Since China's opinion is obviously contrary to reality, the rest of us are entitled to ignore it.

Security quotes of the week

Posted Oct 25, 2021 10:05 UTC (Mon) by PengZheng (subscriber, #108006) [Link] (3 responses)

> Since China's opinion is obviously contrary to reality, the rest of us are entitled to ignore it.

A single individual is seldom qualified to judge a country.
Of course you're entitled to ignore whatever you dislike.
However, there's simply no division of China and the rest of the world, and the so called "us" is the absolute minority in terms of population.

Security quotes of the week

Posted Oct 25, 2021 10:32 UTC (Mon) by mpr22 (subscriber, #60784) [Link] (1 responses)

> A single individual is seldom qualified to judge a country.

The record of human history is saturated with state behaviour that cannot reasonably claim the supposed lack of qualifications of a single individual as a defence against judgement.

Security quotes of the week

Posted Oct 25, 2021 11:13 UTC (Mon) by PengZheng (subscriber, #108006) [Link]

A plugin writer is seldom qualified as an software architect of a very complex framework, and most plugin writers cannot give good judgement on the overall architecture. Meanwhile, the responsible software architect can make mistakes, sometimes a lot.

I see no contradiction here.

Security quotes of the week

Posted Oct 26, 2021 5:07 UTC (Tue) by rbtree (guest, #129790) [Link]

Anti-nazis were an absolute minority in Germany not that long ago. I wouldn't put too much weight on what the majority of the population thinks.

As a poor soul whose country is moving towards greater and greater authoritarianism, the evasions I'm reading here are honestly scary to watch. Most technical measures were copied from China after our Glorious Leader visited China and liked what he saw. At least the population is very skeptical at the moment, though this could change with time as I can plainly see.

Security quotes of the week

Posted Oct 22, 2021 6:51 UTC (Fri) by wsy (subscriber, #121706) [Link] (4 responses)

If this is BS, why can't we search tank man in Baidu? Why can't we use Google?

Using VPN to circumvent the GFW is ilegal, don't use that as an excuse.

Security quotes of the week

Posted Oct 25, 2021 10:21 UTC (Mon) by PengZheng (subscriber, #108006) [Link] (3 responses)

The man standing in front of a tank appeared in the official CCTV report, which I watched when I was very young. Don't know what you are complaining about.

As for google, it refused to obey China's law at first, and the DragonFly effort to return to China is stopped by the US, period.

Security quotes of the week

Posted Oct 25, 2021 19:47 UTC (Mon) by Cyberax (✭ supporter ✭, #52523) [Link] (2 responses)

Try searching for it on Baidu. Use queries like "tiananmen tank man". Go on, we'll wait.

Security quotes of the week

Posted Oct 26, 2021 1:15 UTC (Tue) by PengZheng (subscriber, #108006) [Link] (1 responses)

Congratulations! You've found the highly efficient way of treating misinformation and anti-China agenda.

Security quotes of the week

Posted Oct 26, 2021 13:54 UTC (Tue) by corbet (editor, #1) [Link]

I think you have taken this about as far as it can go, especially given that it is pretty far off-topic for LWN. Let's stop this here? Thank you.

Security quotes of the week

Posted Oct 23, 2021 19:37 UTC (Sat) by porridge (subscriber, #15054) [Link] (2 responses)

It seems that average person's understanding of the meaning of the word "code" in "source code" is just as unfortunate as the average person's understanding of the word "theory" in "scientific theory".

Security quotes of the week

Posted Oct 27, 2021 18:53 UTC (Wed) by nilsmeyer (guest, #122604) [Link]

I often think since the term is a bit overloaded a lot of non-technical people misunderstand it as "secret code", like a PIN number or encryption key.

Security quotes of the week

Posted Oct 27, 2021 19:45 UTC (Wed) by Wol (subscriber, #4433) [Link]

Can I throw the word "proof" in there too - seeing as the meaning of that word in the mathematical sense has the complete opposite effect of the same word in the scientific sense ... (yes, they're the same word, with the same meaning, but opposite results).

Cheers,
Wol


Copyright © 2021, Eklektix, Inc.
Comments and public postings are copyrighted by their creators.
Linux is a registered trademark of Linus Torvalds