3 ms·
> Computer security is a black hole that will consume ever increasing amounts of money, memory, and cpu cycles, forever. What a waste. That is defeatist and fa
by anf 10y ago
> Computer security is a black hole that will consume ever increasing amounts of money, memory, and cpu cycles, forever. What a waste.
That is defeatist and false. Computer security done intelligently can raise the cost of an attack above the value of what is being protected.
- cmdrfred 10y agoI agree, a well spent security dollar might make an attack cost $100 more for the assailant. It's classic attrition warfare[0]. [0]https://en.wikipedia.org/wiki/Attrition_warfare https://en.wikipedia.org/wiki/Attrition_warfare
- Spooky23 10y agoNo way. Computer security is like a tax whose returns diminish rapidly. Once you start prioritizing it with money on security vs product/system engineering, security starts turning into a money monster that delivers nothing. I've seen it happen time and time again. The asymmetric nature of raising the cost for an attacker is a red herring. You can pat yourself on the back that you've supposedly made it 100x more expensive to attack you, but one operational fuckup pops that fantasy bubble at any time.
- dom0 10y agoI have to agree here. Security in itself is highly asymmetrical, because any single flaw can prove fatal, even with the latest and greatest defense-in-depth techniques. Not to forget the many, many instances where security systems actively harmed / enabled attacks.