Posts Tagged ‘security’

[efail] Enigmail 2.0 and Debian testing

June 7, 2018

If you are someone like me – meaning you use thunderbird/enigmail on debian testing – you might be interested when enigmail 2.x is coming into the testing repositories. You know, because of efail.

There is one reddit discussion about the status of enigmail 2.0 in debian stable/stretch. But what about us testing users? There is the debian package tracker website where you can get more details on which package is on the way into stable/testing/experimental. The page for enigmail shows that enigmail 2.0.6-1 is on its way, but I have no experience how long it will take to trickle into debian testing.

Maybe some of you out there have any experience? How long does it take?

Reconceptualizing Security

February 9, 2008

This post is about another video presentation of the linux.conf.au 08. linux.conf.au logo

Bruce Schneider gave a speech about security  [download as ogg theora or spx]. He states that the word security has two meanings. One is the security in reality (how secure something really is) and the feeling of security (how secure somebody feels about something).
He explains why this difference is important and that these two concepts need to be addressed in different ways.

I think the presentations explains and clarifies a lot of phenomenas in the field of security (IT, airlines, …). But I think he should have talked more about how we can take irrational fears from people and to allow them to think about the real security more instead of relying on their feelings of security.

Security is both a feeling and a reality.  You can feel secure without actually being secure, and you can be secure even though you don’t feel secure.
In the industry, we tend to discount the feeling in favor of the reality, but the difference between the two is important.  It explains why we have so much security theater that doesn’t work, and why so many smart security solutions go unimplemented.  Several different fields — behavioral economics, the psychology of decision making, evolutionary biology — shed light on how we perceive security, risk, and cost.
Learn how perception of risk matters and, perhaps more importantly, learn how to design security systems that will actually get used.

The cost of security…

February 7, 2008

Nice visualisation of the cost of security…

Security vs Privacy
Source: Netzpolitik.org

Security vs Privacy II
Source: Netzpolitik.org