Hacker News new | ask | show | jobs
by RajT88 42 days ago
The way to think about security is as a system of layers, each of which filters out ever more sophisticated attackers.

We should care about all kinds of attackers, and not assume that the protections against the most sophisticated will obviate the protections against the least sophisticated.
1 comments
cachius 42 days ago
The Swiss cheese model. Each single layer has holes, but when stacked the combined hole area is minimized https://en.wikipedia.org/wiki/Swiss_cheese_model
link
slow_typist 42 days ago
The Swiss cheese model is what people use to sell you more 'security' related software systems that inherently involve more problems. (Also cheese is not very durable, even the kind without holes.)
link
LorenPechtel 41 days ago
Swiss cheese applies to more than just security systems.

Hiking with two GPS-capable devices is Swiss cheese.

link
slow_typist 41 days ago
That is redundancy in my book. I don’t expect holes in my GNSS devices. And if you want to be sure, bring three, because two GNSS units with different readings are not very helpful.
link
LorenPechtel 40 days ago
I don't expect holes. But both devices are exposed--something could happen to one of them. And since I like going out in the middle of nowhere I assume I either have to get myself out, or if that's impossible summon help. I don't want a single point of failure on either of these.
link
slow_typist 38 days ago
Fair enough. A paper map and the ability to navigate offline would be a nice backup, too. Not that I wouldn’t use GPS in distress.
link
ButlerianJihad 42 days ago
That was an enlightening read, considering the colloquial meaning of "your firewall security is like Swiss cheese"

https://en.wiktionary.org/wiki/Swiss_cheese#Noun

What's next? A system so secure that you can drive a truck through it? A honeypot in the center of a wasp nest?

link