<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	>
<channel>
	<title>Comments on: Security Review: The Human Heart</title>
	<atom:link href="http://cubist.cs.washington.edu/Security/2008/03/16/security-review-the-human-heart/feed/" rel="self" type="application/rss+xml" />
	<link>http://cubist.cs.washington.edu/Security/2008/03/16/security-review-the-human-heart/</link>
	<description></description>
	<pubDate>Mon, 06 Oct 2008 13:39:28 +0000</pubDate>
	<generator>http://wordpress.org/?v=2.6.2</generator>
		<item>
		<title>By: Munin</title>
		<link>http://cubist.cs.washington.edu/Security/2008/03/16/security-review-the-human-heart/#comment-4494</link>
		<dc:creator>Munin</dc:creator>
		<pubDate>Wed, 26 Mar 2008 15:44:24 +0000</pubDate>
		<guid isPermaLink="false">http://cubist.cs.washington.edu/Security/2008/03/16/security-review-the-human-heart/#comment-4494</guid>
		<description>Generalised:

- Identify the Assets you want to protect (be they tangible, intangible or otherwise).

- Estimate the value to you of each of these assets.

- Estimate the consequences should one or more of these assets be compromised and what remedies you might have should that happen.

- What events or conditions could cause the loss of these assets? What path leads from the current situation to the failure state.

- At what point can you influence the flow of events if they are following a failure path and how much effort/cost would be required in each case?

- Act according to your assessment.

That's what I tend to try and do anyway. One thing to watch out though, when thinking that way, is that it is a very defensive approach to things. If you are too focused on protecting what you have then you might overlook opportunities to experience new things, make new friends and generally find more things in life that you value and enjoy.</description>
		<content:encoded><![CDATA[<p>Generalised:</p>
<p>- Identify the Assets you want to protect (be they tangible, intangible or otherwise).</p>
<p>- Estimate the value to you of each of these assets.</p>
<p>- Estimate the consequences should one or more of these assets be compromised and what remedies you might have should that happen.</p>
<p>- What events or conditions could cause the loss of these assets? What path leads from the current situation to the failure state.</p>
<p>- At what point can you influence the flow of events if they are following a failure path and how much effort/cost would be required in each case?</p>
<p>- Act according to your assessment.</p>
<p>That&#8217;s what I tend to try and do anyway. One thing to watch out though, when thinking that way, is that it is a very defensive approach to things. If you are too focused on protecting what you have then you might overlook opportunities to experience new things, make new friends and generally find more things in life that you value and enjoy.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Kris Plunkett</title>
		<link>http://cubist.cs.washington.edu/Security/2008/03/16/security-review-the-human-heart/#comment-4313</link>
		<dc:creator>Kris Plunkett</dc:creator>
		<pubDate>Fri, 21 Mar 2008 20:57:21 +0000</pubDate>
		<guid isPermaLink="false">http://cubist.cs.washington.edu/Security/2008/03/16/security-review-the-human-heart/#comment-4313</guid>
		<description>This article conveys very well the idea that at the heart of computer security, in fact security of any kind, is the fragile, imperfect human being. In order to understand the risks of security, we need to understand the assets that we are trying to protect. However, to understand those assets fully, we must understand the people who value those assets. Perhaps there should be more cooperation between computer security specialists and those who have insight into the human being, namely the psychologists, doctors, and philosophers of society.

I would also like to commend the author for the manner in which their views were conveyed. I personally do not follow the Christian views but definitely take to heart many of the lessons that this faith teaches, such as friendship, kindness, and forgiveness.

Finally, I would like to add my own view on the matter of the heart. I feel that a critical component to individual well-being is the attainment of balance. For example, I agree that the sole pursuit of financial security is indeed "misplaced hope", but it is an unfortunate fact of life that we have physical requirements for survival. Following this example, I would advise understanding the  importance of financial security while at the same time realizing that it alone cannot guarantee happiness. Other areas require balance as well, such as retaining the motivation for self-improvement while not condemning oneself for not "being good enough".

A vastly complex yet critically important idea has been touched upon here; one that I think security folks should think about more often since we have the tendency to get wrapped up in the technical and technological details of our work.</description>
		<content:encoded><![CDATA[<p>This article conveys very well the idea that at the heart of computer security, in fact security of any kind, is the fragile, imperfect human being. In order to understand the risks of security, we need to understand the assets that we are trying to protect. However, to understand those assets fully, we must understand the people who value those assets. Perhaps there should be more cooperation between computer security specialists and those who have insight into the human being, namely the psychologists, doctors, and philosophers of society.</p>
<p>I would also like to commend the author for the manner in which their views were conveyed. I personally do not follow the Christian views but definitely take to heart many of the lessons that this faith teaches, such as friendship, kindness, and forgiveness.</p>
<p>Finally, I would like to add my own view on the matter of the heart. I feel that a critical component to individual well-being is the attainment of balance. For example, I agree that the sole pursuit of financial security is indeed &#8220;misplaced hope&#8221;, but it is an unfortunate fact of life that we have physical requirements for survival. Following this example, I would advise understanding the  importance of financial security while at the same time realizing that it alone cannot guarantee happiness. Other areas require balance as well, such as retaining the motivation for self-improvement while not condemning oneself for not &#8220;being good enough&#8221;.</p>
<p>A vastly complex yet critically important idea has been touched upon here; one that I think security folks should think about more often since we have the tendency to get wrapped up in the technical and technological details of our work.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Karl</title>
		<link>http://cubist.cs.washington.edu/Security/2008/03/16/security-review-the-human-heart/#comment-4310</link>
		<dc:creator>Karl</dc:creator>
		<pubDate>Fri, 21 Mar 2008 18:43:05 +0000</pubDate>
		<guid isPermaLink="false">http://cubist.cs.washington.edu/Security/2008/03/16/security-review-the-human-heart/#comment-4310</guid>
		<description>This review really goes beyond learning computer security and shows the 'twisted' paths of the security mindset. Looking at family life as though it were a system and breakdowns in family life as an exploited vulnerability is truly genius. I hope that you pan to work in a field where your talent can be of service!</description>
		<content:encoded><![CDATA[<p>This review really goes beyond learning computer security and shows the &#8216;twisted&#8217; paths of the security mindset. Looking at family life as though it were a system and breakdowns in family life as an exploited vulnerability is truly genius. I hope that you pan to work in a field where your talent can be of service!</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Don</title>
		<link>http://cubist.cs.washington.edu/Security/2008/03/16/security-review-the-human-heart/#comment-4303</link>
		<dc:creator>Don</dc:creator>
		<pubDate>Fri, 21 Mar 2008 17:19:18 +0000</pubDate>
		<guid isPermaLink="false">http://cubist.cs.washington.edu/Security/2008/03/16/security-review-the-human-heart/#comment-4303</guid>
		<description>Congratulation on managing the seemingly impossible task of submitting your views on life to a CS class! 

Misplaced hope is indeed at the root of many evils of modernity: starting with blind belief in progress, consumerism, to the security issues of this course - social engineering, man in the middle, etc. Now, just to play the devil's advocate (oops), placing all hope in one entity is just as risky as any of the others - see Sartre. It makes just as little sense for the soul as it does for the machine. You cannot just rely on the one BIG firewall to guard your computer, as the evil's ways are intricate. Also, to save my soul from eternal burning, a firewall, no matter how big, won't be enough.</description>
		<content:encoded><![CDATA[<p>Congratulation on managing the seemingly impossible task of submitting your views on life to a CS class! </p>
<p>Misplaced hope is indeed at the root of many evils of modernity: starting with blind belief in progress, consumerism, to the security issues of this course - social engineering, man in the middle, etc. Now, just to play the devil&#8217;s advocate (oops), placing all hope in one entity is just as risky as any of the others - see Sartre. It makes just as little sense for the soul as it does for the machine. You cannot just rely on the one BIG firewall to guard your computer, as the evil&#8217;s ways are intricate. Also, to save my soul from eternal burning, a firewall, no matter how big, won&#8217;t be enough.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: planetheidi</title>
		<link>http://cubist.cs.washington.edu/Security/2008/03/16/security-review-the-human-heart/#comment-4300</link>
		<dc:creator>planetheidi</dc:creator>
		<pubDate>Fri, 21 Mar 2008 16:15:09 +0000</pubDate>
		<guid isPermaLink="false">http://cubist.cs.washington.edu/Security/2008/03/16/security-review-the-human-heart/#comment-4300</guid>
		<description>Interesting analysis. This is definitely an area examined and exploited in the security field.  To the techies, it's called social engineering and pretty low-key.  In Intelligence and information war , this is their bread and butter.  And this is where I suggest you take your research next.  I'd suggest googling up Project Slammer.  And yes, you will learn a lot to apply to your computer defense lessons.</description>
		<content:encoded><![CDATA[<p>Interesting analysis. This is definitely an area examined and exploited in the security field.  To the techies, it&#8217;s called social engineering and pretty low-key.  In Intelligence and information war , this is their bread and butter.  And this is where I suggest you take your research next.  I&#8217;d suggest googling up Project Slammer.  And yes, you will learn a lot to apply to your computer defense lessons.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Josh</title>
		<link>http://cubist.cs.washington.edu/Security/2008/03/16/security-review-the-human-heart/#comment-4279</link>
		<dc:creator>Josh</dc:creator>
		<pubDate>Fri, 21 Mar 2008 13:01:53 +0000</pubDate>
		<guid isPermaLink="false">http://cubist.cs.washington.edu/Security/2008/03/16/security-review-the-human-heart/#comment-4279</guid>
		<description>Excellent analysis!  I appreciated the note up-front about the world-view perspective that this comes from.  A lot of authors might not be as intellectually honest about their own perspective.  You did a very good job of logically demonstrating the validity and effectiveness (and importance) of protecting our hearts this way.
Thanks!</description>
		<content:encoded><![CDATA[<p>Excellent analysis!  I appreciated the note up-front about the world-view perspective that this comes from.  A lot of authors might not be as intellectually honest about their own perspective.  You did a very good job of logically demonstrating the validity and effectiveness (and importance) of protecting our hearts this way.<br />
Thanks!</p>
]]></content:encoded>
	</item>
</channel>
</rss>
