3 ms·

I do not reuse passwords site-to-site, however that nullifies almost none of the risk in storing passwords in plaintext over storing hashed passwords. Perhaps y

I do not reuse passwords site-to-site, however that nullifies almost none of the risk in storing passwords in plaintext over storing hashed passwords. Perhaps you can explain why you think that if you disagree. At any rate, that the market provides "what people want" (this is not always an uncontroversial statement) is precisely why airport security can not be deregulated. People tend to undervalue security until it's too late.

Symmetry 15y ago
People tend to undervalue security until it's too late. This seems unclear to me. Surely, in being disproportionaly exposed to failures of security, as opposed to people getting away with insecure practices or the inconvenience of good security procedures, security professionals are going to have a distorted view of the costs of security? People tend to be very bad at multiplying in the process of making moral judgements[1], and its very hard to give equal weight to the sum total of traveler inconvenience our airline security policies cause relative to the risk of terrorist attacks. And there's no reason to think that the TSA takes into account the >100 people killed each year by their policies [2]. If you think that airline passengers aren't going to allow another 9/11 that's probably more deaths right there than the TSA could plausibly claim to be preventing in terms of airline bombings. I don't think private airline security would be perfect and it probably would go a bit too far towards lax security, but it would almost certainly be much better than what we have right now. [1] As an example, people will pay almost as much money to save the lives of 10 starving orphans as they will to save 1 starving orphan. No, I didn't get that reversed, and if you've ever studied psychology you shouldn't find that too surprising. [2] http://aem.cornell.edu/faculty_sites/gb78/wp/JLE_6301.pdf http://aem.cornell.edu/faculty_sites/gb78/wp/JLE_6301.pdf http://ur.umich.edu/0405/Nov22_04/09.shtml http://ur.umich.edu/0405/Nov22_04/09.shtml http://www.thenewamerican.com/index.php/usnews/constitution/5288-tsa-freedom-grope-may-lead-to-highway-fatalities http://www.thenewamerican.com/index.php/usnews/constitution/... http://patrick.wagstrom.net/weblog/2010/11/24/do-the-tsa-new-ait-body-scanners-hurt-more-than-they-help/ http://patrick.wagstrom.net/weblog/2010/11/24/do-the-tsa-new... and relatedly http://cosmiclog.msnbc.msn.com/_news/2010/11/16/5477568-are-airport-x-ray-scanners-harmful http://cosmiclog.msnbc.msn.com/_news/2010/11/16/5477568-are-... and previous HN discussion http://news.ycombinator.com/item?id=2049894 http://news.ycombinator.com/item?id=2049894

Symmetry 15y ago

People tend to undervalue security until it's too late. This seems unclear to me. Surely, in being disproportionaly exposed to failures of security, as opposed to people getting away with insecure practices or the inconvenience of good security procedures, security professionals are going to have a distorted view of the costs of security? People tend to be very bad at multiplying in the process of making moral judgements[1], and its very hard to give equal weight to the sum total of traveler inconvenience our airline security policies cause relative to the risk of terrorist attacks. And there's no reason to think that the TSA takes into account the >100 people killed each year by their policies [2]. If you think that airline passengers aren't going to allow another 9/11 that's probably more deaths right there than the TSA could plausibly claim to be preventing in terms of airline bombings. I don't think private airline security would be perfect and it probably would go a bit too far towards lax security, but it would almost certainly be much better than what we have right now. [1] As an example, people will pay almost as much money to save the lives of 10 starving orphans as they will to save 1 starving orphan. No, I didn't get that reversed, and if you've ever studied psychology you shouldn't find that too surprising. [2] http://aem.cornell.edu/faculty_sites/gb78/wp/JLE_6301.pdf http://aem.cornell.edu/faculty_sites/gb78/wp/JLE_6301.pdf http://ur.umich.edu/0405/Nov22_04/09.shtml http://ur.umich.edu/0405/Nov22_04/09.shtml http://www.thenewamerican.com/index.php/usnews/constitution/5288-tsa-freedom-grope-may-lead-to-highway-fatalities http://www.thenewamerican.com/index.php/usnews/constitution/... http://patrick.wagstrom.net/weblog/2010/11/24/do-the-tsa-new-ait-body-scanners-hurt-more-than-they-help/ http://patrick.wagstrom.net/weblog/2010/11/24/do-the-tsa-new... and relatedly http://cosmiclog.msnbc.msn.com/_news/2010/11/16/5477568-are-airport-x-ray-scanners-harmful http://cosmiclog.msnbc.msn.com/_news/2010/11/16/5477568-are-... and previous HN discussion http://news.ycombinator.com/item?id=2049894 http://news.ycombinator.com/item?id=2049894