Index ¦ Archives ¦ Atom > Tag: Security

Kerckhoffs's principle

One of the security tenants that I live by is Kerckhoffs's principle.

A cryptosystem should be secure even if everything about the system, except the key, is public knowledge.

-- Auguste Kerckhoffs, 1883

It's beautiful in it's simplicity and yet counter intuitive.

It's a beguiling myth that if you want to …


AviD's Rule of Usability

There is a quote that's been floating around Security Stack Exchange for a while that I like, it's called AviD's Rule of Usability:

"Security at the expense of usability, comes at the expense of security."

I think it's brilliant. I've see it several times where security has made things too …


Estimating the security of software

Estimating the security of software is something that most systems administrators do instinctively, whether consciously or subconsciously. I have heard people say things like "Don't use WordPress it's always getting hacked", "Linux is more secure than Windows"1 or "Macs don't get viruses"2. All of these are estimates about …

Creative Commons License
Content on this site is licensed under a Creative Commons Attribution 4.0 International License.
Built using Pelican. Based on a theme by Giulio Fidente on github.