Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

It's really telling when computer experts are the ones most scared ahout electronic voting, software lotteries, etc.

Even the best BitCoin experts seem to recommend burying your bitcoin key in you yard or storing it on paper at the bank.



Absolutely. The most useful idea I've seen about how to think about this is this: 'On a network, everything is at zero distance'.

So, imagine the worst people you can imagine in the whole world, sitting right there in the same room as all the things you care about. You'd probably be worried about that, right?

But, the argument goes, we have all these security measures in place between those things. They're not in the same room we've built all these walls! Sure, but those walls are not impenetrable by a long shot. None of them beats simply not being in the same place. Nobody has a teleporter yet, but those layers of security you are relying on are vulnerable to a constantly evolving landscape of exploits, vulnerabilities and plain old fuck-ups.

This is why air gaps are still such a valuable concept. Why off-siting your backup tapes is not an outdated step but rather a pragmatic step in securing your information assets. Why keeping some systems unplugged from any network when they're running critical infrastructure is sensible. Why buring your bitcoin wallet in some secret location is not the behaviour of an off-the-wall tinfoil nutter.

There are, of course, steps to be taken if you have compelling reasons to stay connected, and those steps can get you to (or close to) the same level of assurance as unplugging. But those steps are complex, require ongoing maintenance, and operate in an evolving threat landscape. Think for example: Encryption protocols that we used to consider secure.

There's a simple bypass for that effort and knowledge and it's to unplug. It's a very powerful tool, and yet often ridiculed, in my opinion from positions of either ignorance or zealotry.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: