IP Technical question

Ian Batten ukcrypto at chiark.greenend.org.uk
Sat, 31 Jan 2009 15:40:08 +0000


Sent from my iPhone

Roland:
>>
>>
> My point is while it's not hard work for those in the know (just as  
> getting false plates is *not* hard work - indeed Fearghas says it's  
> not even banned in Scotland, I wonder if garages in Gretna Green do  
> a roaring trade?)...
>
> ... there are plenty of criminals who don't, so it's worth having  
> measures to mop those up.

the problem is that the ecosystem is in constant flux. if we make  
carelessness over comsec more risky for criminals, we raise the value  
of being careful.  just using data retention to catch more  
carelessness isn't cost-free: more being caught teaches those so far  
not caught both the general value of security and the specific things  
that led to the convictions. and those learning the lesson may be more  
worrying than those acting as examples.

catching more purveyors of badly-marketed eggs is a bad deal
if it encourages aspirant bombers who previously used weak word-codes  
to switch to one time pads.

ian


>
>
>> Your retort-by-analogy here seems to be that, even if some  
>> criminals practice safe-opsec, some do not. Which seems a slightly  
>> different point, which I wouldn't argue with.
>
> Indeed :)
> -- 
> Roland Perry
>