As Bruce Schneier realized a while back, security and anti-security (e.g. cracking) is about microeconomic risk assessment and decision making.

Anything that creates a barrier to threat creation is a legitimate security measure. That includes both real and *perceived* barrier creation. Perception is certainly due in part to ecological factors: both on the Apple user side and on the threat side. Anything that reduces threat *probability* is a legitimate security measure. Strategically, security is a stochastic stimulus and response, rather than some absolute goal.

[ reply ]

Link to this comment: http://www.securityfocus.com/comments/columns/319/31555#31555