🚀 go-pugleaf

In article <herman.725755696@phage> herman@nosc.mil (John W. Herman) writes:
>smb@research.att.com (Steven Bellovin) writes:
>
>
>One other point, any examination of the open literature regarding
>protection of sensitive information reveals that the easiest way to get
>access to that information is by corrupting someone with access.  In
>commercial endeavors, this is frequently very easy since only money and
>honor are involved.  Other popular methods are illegal entry and bugging
>of various types.  None of these techniques require any cryptographic
>capability.  (When was the last time you checked your mechanical pencil
>to see if it was bugged.)
>

This reminds me of something I read on alt.locksmithing.  The analogy
between an encryption system and a lock on the door applies here.
Locks are meant to keep out respectable citizens, not thieves.

Burglars will not usually go to the trouble of picking the lock on the
door.  It usually takes too much time.  Besides, it takes years to
learn the technique (tools are not hard to get).

Instead, they usually kick the door in, or break a window.

Alejo Hausner (hausner@qucis.queensu.ca)