News for hackers. Stuff that matters.
Re:Ex-Minuteman missile officer: I could have faked a global... by TeMPOraL on Monday November 22, 2010 @01:16AM (#1928879)
After reading this I start to really feel why we don't like 'security by obscurity'...
Re:Ex-Minuteman missile officer: I could have faked a global... by dfox on Monday November 22, 2010 @08:53AM (#1929756)
I think that this is actually pretty good use of security by obscurity. You cannot prevent well motivated and capable attacker from launching unauthorized nuclear strike by purely technical means.

Well probably anything related to "tamper proof" security (defending against attacker who has full uncontrolled access to "secure" device) of anything is security by obscurity at best (security of such commercial products is often based on that each device uses unique configuration of countermeasures) and pure snake oil more often.

In this case whole security of this system really relies on people (and their belief that there are some technical security measures that they cannot trivially circumvent) and focusing on technical means too much would actually divert resources to something that is actually not possible to do perfectly. USAF probably correctly assumed that relying on people is better approach. I remember that some (probably DoD-sponsored, in relation to WMD security) study asserted that only meaningful way to protect system from well funded and motivated attackers is to not let such attackers near the system (presumably by means of guarding it).