3 ms·
I feel like there's an analogue to the CAP theorem for code, where you can have an un-exploitable application if you don't need it to keep running in the presen
by remram 5y ago
I feel like there's an analogue to the CAP theorem for code, where you can have an un-exploitable application if you don't need it to keep running in the presence of unusual requests.
Secure, Available, Unattended, choose any 2? You can have a secure&available app but you need to keep patching it. You can have an available&unattended app but it won't be secure. Or you can have a secure&unattended app, it will just need to crash a lot.
- hinkley 5y agoAvailable and Unattended are the same thing. The third value is 'Cheap'. You want unattended servers? Fine. You want someone not to be able to steal the keys from a backup? We can do that too. You want the servers to be able to restart at 2 am without getting someone out of bed to come type a passphrase into a console on each server? HSMs were quite expensive. People made any number of attempts to make them cheap and found out why they aren't (Ari Shamir has entered the chat), often a Too Good to be True scenario.