The Six Dumbest Ideas in Computer Security
This morning, when I logged in my computer, I opened Firefox and realized that my bookmark file was starting to be a bit oversized (Insanely huge would be more like it). It was well past time to do a big cleanup. While deleting my useless links, I stumbled on an old article I had completely forgotten about. "The Six Dumbest Ideas in Computer Security" is one of the best security-related article I've read in the past few years. Everyone should read it, and no, you don't have to be a security guru to understand what's in there.
"Let me introduce you to the six dumbest ideas in computer security. What are they? They're the anti-good ideas. They're the braindamage that makes your $100,000 ASIC-based turbo-stateful packet-mulching firewall transparent to hackers. Where do anti-good ideas come from? They come from misguided attempts to do the impossible - which is another way of saying "trying to ignore reality." Frequently those misguided attempts are sincere efforts by well-meaning people or companies who just don't fully understand the situation, but other times it's just a bunch of savvy entrepreneurs with a well-marketed piece of junk they're selling to make a fast buck. In either case, these dumb ideas are the fundamental reason(s) why all that money you spend on information security is going to be wasted, unless you somehow manage to avoid them."
The Six Dumbest Ideas in Computer Security.