Tech Locks

Anyone can pick a lock, just head to YouTube
By
Published ~ 3 minutes read

The problem with locks is that there is always a key to open them. No matter how secure you make them, you still have to make it accessible to the person who owns it. Because of this feature or flaw, anyone with the key can open a lock.

Technology locks are a little different. Apple says that they have no way to unlock a device because the customer is the one who creates the key. Thus only the customer can unlock it. Now Tim Cook, Apple's CEO, is viewed as a hero and a fierce advocate for privacy.

At the end of the day we still need a key to unlock the phone, and the customer has that key. Worst when the device is locked with a pin, only four digits are needed to unlock it. (brute force anyone?)

There are two ways to unlock any authentication system, whether it's a physical lock, or software protection. One is to find a design flaw, which somebody always finds some how, remember heartbleed? The other is to use the key to unlock it. Social engineering, or clever tricks to get the owner of the key to hand it over. Or beat him up into submission.(torture, or threats, let's not pretend this doesn't happen)

The point is, if there is a single way for a person to legitimately open the lock, then there is a way to open the lock for others.

This brings us back to a fundamental problem of life. Nothing is safe. Just because you wear a helmet, or a seat-belt doesn't mean you won't get hurt. All they do is help you increase your chances of survival, but never eliminate the problem entirely.

A lock keeps honest people honest. When you use a password to lock your computer, it may keep your family and friends at bay, but a dedicated identity thief might find ways to get in.

The only way the lock on your door is protecting you, is that the thief knows that if he is caught breaking in he will have to face the law. On the web, it is much harder to identify the thief, giving them more protection. The fact that Apple cannot unlock their own device is a step in the right direction, even if it doesn't provide omniprotection.

Just remember all locks are never 100% secure. That's just the way it is.

On a related note, here are some interesting articles.

Gun safety and Internet literacy.

Gun safety and Internet literacy.

I recently read a post by Steve Blank where he compared the Internet with guns. He talks about how important it was to learn about gun safety. It was the first thing he learned in boy scout camp in the rifle range before even handling a weapon. Later when he purchased a heavier weapon, he hired a professional to teach him about gun safety before using it. He suggest that when accessing the web the first time, the same precautions should be taken. Interestingly the same day I read his post, I was invited to a shooting range and my experience was quiet different.

They said if I use bcrypt everything will be fine

They said if I use bcrypt everything will be fine

Hi my name is Shackleford, Rusty Shackleford. I run a successful web service with millions of active users. It is a one man show but through sheer luck I designed it in a highly scalable way from the very beginning. I am a programmer so it is very important for me to make my service very secure and user privacy is treated with utmost importance. I write today for one reason. Tomorrow, I am shutting down my very profitable business because it is the only way I can hold my end of the privacy contract I promised my customers.

Privacy issues aside, it's a damn good service

Privacy issues aside, it's a damn good service

Google, Facebook, and many, use your information to re-target ads. It is their way of making money. It was fine in the beginning because they came from humble backgrounds. It was the kid in his college dorm trying to build a cool new thing. We admired and cheered for them until they became the giants that basically govern the Internet today. Despite all the talks of how evil they are, we wouldn't be using their services if they weren't doing such a fine job.

View all articles

Comments

There are no comments added yet.

Let's hear your thoughts

For my eyes only