security

Savage’s Theorem

Monday, April 14th, 2008

I don’t remember where or when, now, but but a few years ago I came across a piece of advice from a respected security expert that ran something like this: “If you treat your users like criminals, they will invariably prove you right.” Even though I don’t remember who said it or where (I think […]

Identity and hypocrisy

Thursday, September 20th, 2007

I relaized today that I’m a hypocrite.
On the one hand, I’m a big proponent of OpenID. I think that tying identity to individuals, rather than services, makes sense and is the only sensible way to handle id management on the internet.
That doesn’t mesh well, though, with my general security policy and open derision […]

Constitution 2.0

Monday, April 2nd, 2007

Ed Foster should leave Info World and do political satire full time:
CONSTITUTION OF THE UNITED STATES OF AMERICA, Version 2.0
You, the people of the United States of America (herein referred to as “You”), in order to form a more perfect union with your Government (herein referred to as “Government” or “We”), do agree to be […]

SiteKey

Tuesday, February 6th, 2007

Ryan over at 27b/6 has an article up today about SiteKey, and the fact that it doesn’t really do anything. Actually, it’s a link to an NYT piece where one of the researchers concludes that “Sometimes the appearance of security is more important than security itself,” and the the reason Bank of America was willing […]