Cities, Disneyland, and Software Security

Disneyland - Sleeping Beauty Castle

I like to think of our modern software infrastructure as being like a large city and posing the same trade-offs between risk and reward. We don’t wander carelessly around cities because of pickpockets, muggers, and crazy drivers. A city’s risks arise from its freedom, as does the city’s lure as a destination.

To be a lure, a safe space offers something special, usually entertainment: think of Disneyland, Disney World, and similar places. They provide safety by controlling the entry and exit, restricting behavior, and so on.

We apply a similar trade-off to our software. Many people have never worried about software flaws in general; older computer workers stopped worrying a long time ago. We’ve found that software can be both flawed and incredibly useful or compelling.

ACSAC Android Apple attacks authentication Bitcoin Boak Calibre certificates CIA properties classified Clinton cloud computing Coursera CPU cracking crypto cybercurrency databases design principles domain names Drupal ebooks elections email encrypted messages evaluations file systems flaws Ft. Meade GUI history iOS iPhone KGB Kindle library malware memory sizes Microsoft mobile security MSSE Multics NSA NSTISSI 4011 OPDS passwords phishing President quantum Quizlet RAM risks secrecy spam SSL stream cipher TCSEC Top Secret training Trump UMN video Wordpress xor