Re:The App I Used to Break Into My Neighbor’s Home
by PeterisP on Sunday July 27, 2014 @06:29AM
(#8092410)
Just like imperfect passwords, keys have a valid place in the security models.
Security is always a tradeoff, and there are many usecases where a huge increase in security isn't worth even a tiny increase in accessibility or cost.
Let's take an example of cheap padlock on a garden shed or a lock on a filing cabinet. Both of them are trivially broken, either by skill or simply brute force. Yet, they achieve their security goal - they do prevent (as in, significantly reduce frequency) random passers-by from taking the stuff inside. A more secure model, such as smart cards, would be an inferior choice there due to increased cost and decreased usability.
For example, a secure system would require to make it harder for a random person to make copies of the key/token/whatever. An accessible system would require to actually make it easier - so that any keyholders can easily make copies without authorization from 'key owner' that takes some time and effort. For example, if a renter needs to involve the landlord to copy his key if one of them was lost, then it's more secure but less usable. "Easily copied" is a bug or a feature only depending on the system needs.
Security is always a tradeoff, and there are many usecases where a huge increase in security isn't worth even a tiny increase in accessibility or cost.
Let's take an example of cheap padlock on a garden shed or a lock on a filing cabinet. Both of them are trivially broken, either by skill or simply brute force. Yet, they achieve their security goal - they do prevent (as in, significantly reduce frequency) random passers-by from taking the stuff inside. A more secure model, such as smart cards, would be an inferior choice there due to increased cost and decreased usability.
For example, a secure system would require to make it harder for a random person to make copies of the key/token/whatever. An accessible system would require to actually make it easier - so that any keyholders can easily make copies without authorization from 'key owner' that takes some time and effort. For example, if a renter needs to involve the landlord to copy his key if one of them was lost, then it's more secure but less usable. "Easily copied" is a bug or a feature only depending on the system needs.