IP Technical question
Ian Batten
ukcrypto at chiark.greenend.org.uk
Sat, 31 Jan 2009 15:40:08 +0000
Sent from my iPhone
Roland:
>>
>>
> My point is while it's not hard work for those in the know (just as
> getting false plates is *not* hard work - indeed Fearghas says it's
> not even banned in Scotland, I wonder if garages in Gretna Green do
> a roaring trade?)...
>
> ... there are plenty of criminals who don't, so it's worth having
> measures to mop those up.
the problem is that the ecosystem is in constant flux. if we make
carelessness over comsec more risky for criminals, we raise the value
of being careful. just using data retention to catch more
carelessness isn't cost-free: more being caught teaches those so far
not caught both the general value of security and the specific things
that led to the convictions. and those learning the lesson may be more
worrying than those acting as examples.
catching more purveyors of badly-marketed eggs is a bad deal
if it encourages aspirant bombers who previously used weak word-codes
to switch to one time pads.
ian
>
>
>> Your retort-by-analogy here seems to be that, even if some
>> criminals practice safe-opsec, some do not. Which seems a slightly
>> different point, which I wouldn't argue with.
>
> Indeed :)
> --
> Roland Perry
>