5 ms·

I would be hard pressed to think of things that "can't be tampered with." When you make something difficult to tamper with, you usually just increase the potent

I would be hard pressed to think of things that "can't be tampered with." When you make something difficult to tamper with, you usually just increase the potential payout of tampering. There's an essential problem: all security systems can be compromised. When a security system seems more safe than the others, more people will use that system, thereby increasing the incentive for adversaries to try to break it (and almost always they will succeed).

nickpsecurity 10y ago
"When you make something difficult to tamper with, you usually just increase the potential payout of tampering." You actually decrease it. The payout of tampering is associsted with assets security scheme protects. As for that point, vendors should sell the solutions as reducing but not eliminating risk. Plus encourage monitoring and audits.
asuffield 10y ago
> When you make something difficult to tamper with, you usually just increase the potential payout of tampering. The real goal is to make the cost of tampering exceed the payout. The standard mechanisms for increasing the cost are computational power needed (cryptography) and ability to participate in mainstream society (legislation).