Mailinglist Archive

The Feeling and Reality of Security

Security is both a feeling and a reality, and they're different. You can
feel secure even though you're not, and you can be secure even though
you don't feel it. There are two different concepts mapped onto the same
word -- the English language isn't working very well for us here -- and
it can be hard to know which one we're talking about when we use the
word.

There is considerable value in separating out the two concepts: in
explaining how the two are different, and understanding when we're
referring to one and when the other. There is value as well in
recognizing when the two converge, understanding why they diverge, and
knowing how they can be made to converge again.


Getting security trade-offs wrong:
http://www.schneier.com/essay-162.html

Cognitive biases that affect security:
http://www.schneier.com/essay-155.html

"In Praise of Security Theater"
http://www.schneier.com/essay-154.html

The security lemon's market:
http://www.schneier.com/essay-165.html

Airline security and agenda:
http://www.schneier.com/blog/archives/2005/08/airline_securit_2.html

This essay originally appeared in Wired.com.
http://www.wired.com/politics/security/commentary/securitymatters/2008/04/securitymatters_0403 
or http://tinyurl.com/2xu2zb