Re: [funsec] More bad news for risk management

2012-08-19 Thread valdis . kletnieks
On Sat, 18 Aug 2012 12:17:40 -0400, Jeffrey Walton said: On Fri, Aug 17, 2012 at 12:43 AM, Tomas L. Byrnes t...@byrneit.net wrote: Ignoring risk is a perfectly valid way of managing it, if the return of putting the resources into the risky endeavor exceed the costs of putting them into

Re: [funsec] More bad news for risk management

2012-08-19 Thread Stephanie Daugherty
Reading comprehension fail. Tomas's point is that yes, often there *is* an engineering solution. But if you invest $250K in an engineering solution for a problem that only risks $100K loss, you're being stupid. At that point, just making a note that you have a potential $100K liability

Re: [funsec] More bad news for risk management

2012-08-19 Thread Jeffrey Walton
Hi Valdis, I understand you and Tom. On Sun, Aug 19, 2012 at 11:29 AM, valdis.kletni...@vt.edu wrote: On Sat, 18 Aug 2012 12:17:40 -0400, Jeffrey Walton said: On Fri, Aug 17, 2012 at 12:43 AM, Tomas L. Byrnes t...@byrneit.net wrote: Ignoring risk is a perfectly valid way of managing it, if

Re: [funsec] Gmail Forwarding Logins to YouTube?

2012-08-19 Thread Jeffrey Walton
On Sat, Aug 18, 2012 at 10:22 PM, Nick FitzGerald n...@virus-l.demon.co.uk wrote: Jeff wrote: It appears GMail is forwarding logins to YouTube. ... That's news? And it's not so much forwarding as SSO. snip ... and I would like to supress forwarding my credentials (or obtaining tokens

Re: [funsec] More bad news for risk management

2012-08-19 Thread Tomas L. Byrnes
What you describe is not risk management, but the Externality problem. The solution is to have the banks bear the costs caused by breaches, then they will adopt the correct risk calculation. -Original Message- From: Jeffrey Walton [mailto:noloa...@gmail.com] Sent: Sunday, August