[Full-Disclosure] Security & Obscurity: physical-world analogies

Here are arguments for why it is useful to think systematically about the relationship between computer- and physical-security issues. Yaakov Yehudi's comment is similar to other critiques: > A firewall is more akin to a specialized filter medium, but filter mediums > aren't used as the

[Full-Disclosure] Security & Obscurity: First-time attacks and lawyer jokes

Dave Aitel wrote detailed comments, which I appreciate, and I respond to some of them here. Others in the threads have made some similar comments. > As the Japanese Proverb says, "Only painters and lawyers can change > black to white." > > What are your goals with this paper? If you seem to ha

RE: [Full-Disclosure] Response to comments on Security and Obscurity

e of proprietary information. I'm going to think more about what he has said. Best, Peter Prof. Peter P. Swire Moritz College of Law of the Ohio State University John Glenn Scholar in Public Policy Research (240) 994-4142; www.peterswire.net -Original Mes

[Full-Disclosure] New paper on Security and Obscurity

Greetings: I have been lurking on Full Disclosure for some time, and now would like to share an academic paper that directly addresses the topic of “full disclosure” and computer security: http://papers.ssrn.com/sol3/papers.cfm?abstract_id=531782 It is called “A Model for