Financial Cryptography: Comment on More Brittle Security -- Agriculture

Comments: More Brittle Security -- Agriculture

can you say naked transactions? .... leaving a bunch of valuable stuff laying around fairly unprotected.

in a past life, there was a situation involving legal action over theft of trade secrets ... claiming several billion dollars damage. the judge made some ruling that something worth several billion dollars is an attractive, unresistable target ... and therefor it was necessary to demonstrate that there were protection processes and countermeasures in place that were proportional to the value.

i've commented in the past that this is somewhat akin to the swimming pool as an attractive nuisance, owners of swimming pools can be held liable if tresspasers drawn in their pool unless they can show they've fortified the area (and most people can't resist stealing something worth a couple billion if it is just left laying around).

this is somewhat the security proportional to risk theme
http://www.garlic.com/~lynn/2001h.html#61

and of course the naked payments/transaction threads
http://www.garlic.com/~lynn/aadsm24.htm#5 New ISO standard aims to ensure the security of financial transactions on the Internet
http://www.garlic.com/~lynn/aadsm24.htm#7 Naked Payments IV - let's all go naked
http://www.garlic.com/~lynn/aadsm24.htm#8 Microsoft - will they bungle the security game?
http://www.garlic.com/~lynn/aadsm24.htm#9 Naked Payments IV - let's all go naked
http://www.garlic.com/~lynn/aadsm24.htm#10 Naked Payments IV - let's all go naked
http://www.garlic.com/~lynn/aadsm24.htm#12 Naked Payments IV - let's all go naked
http://www.garlic.com/~lynn/aadsm24.htm#14 Naked Payments IV - let's all go naked
http://www.garlic.com/~lynn/aadsm24.htm#21 Use of TPM chip for RNG?
http://www.garlic.com/~lynn/aadsm24.htm#22 Naked Payments IV - let's all go naked
http://www.garlic.com/~lynn/aadsm24.htm#25 FraudWatch - Chip&Pin, a new tenner (USD10)
http://www.garlic.com/~lynn/aadsm24.htm#26 Naked Payments IV - let's all go naked
http://www.garlic.com/~lynn/aadsm24.htm#27 DDA cards may address the UK Chip&Pin woes
http://www.garlic.com/~lynn/aadsm24.htm#30 DDA cards may address the UK Chip&Pin woes
http://www.garlic.com/~lynn/aadsm24.htm#31 DDA cards may address the UK Chip&Pin woes
http://www.garlic.com/~lynn/aadsm24.htm#32 DDA cards may address the UK Chip&Pin woes
http://www.garlic.com/~lynn/aadsm24.htm#37 DDA cards may address the UK Chip&Pin woes
http://www.garlic.com/~lynn/aadsm24.htm#38 Interesting bit of a quote
http://www.garlic.com/~lynn/aadsm24.htm#41 Naked Payments IV - let's all go naked
http://www.garlic.com/~lynn/aadsm24.htm#42 Naked Payments II - uncovering alternates, merchants v. issuers, Brits bungle the risk, and just what are MBAs good for?
http://www.garlic.com/~lynn/aadsm24.htm#43 DDA cards may address the UK Chip&Pin woes

Posted by Lynn Wheeler at July 23, 2006 09:30 AM

and slightly related to this thread drift:

'House to Vote on Bill to Weaken Current Identity Theft Protections...'
http://releases.usnewswire.com/GetRelease.asp?id=69606

Groups Slam Data Breach Notification Bill
http://www.internetnews.com/bus-news/article.php/3592416

The Financial Data Protection Act of 2005 Introduced; Would Require Tighter Store Level Security
http://www.rtoonline.com/Content/article/Oct05/ConsumerIdentityTheftLegislation100705.asp

Specter, Leahy Introduce Personal Data Privacy And Security Act Of 2005
http://leahy.senate.gov/press/200506/062905a.html

FINANCIAL INFORMATION PRIVACY PROTECTION ACT
http://www.ncoil.org/other/financial_information_privacy_pr.htm

Posted by Lynn Wheeler at July 23, 2006 11:33 AM