Why the DoD will not switch from SSN to random service numbers

Bruce Schneier:
We generally think of computer security as a problem of technology, but often systems fail because of misplaced economic incentives: the people who could protect a system are not the ones who suffer the costs of failure.

DoD will not suffer if my SSN is compromised and my identity is stolen. I do.

Unless the incentive can be turned on them, they have no reason to change.


Mideast, short and sweet

James Rummel prompts me to remark that the face-packing in the Levant is a bit overdue.

One newsreader earlier this week referred to Israel's defending herself against Qassam rockets and UCAVs as "perpetuating the cycle of violence."

Madam, this is no cycle. The violence over the last few weeks all seems unilateral to me. We can hope that the Lebanese government, if there is one (or if a sensible one is in waiting) will see this as an opportunity to eject unwanted puppeteers and determine their own future, and set their own relations with neighbors.

If the US intervenes as a so-called nation-builder, let them learn from recent experiences in Iraq and Afghanistan. Do not value democracy so highly that this new democracy you build can merely vote down the rule of law, the right to own oneself, and the right to be equal before the law regardless of one's practice of this or that religion. Talk to the speechwriters and find some word other than democracy to bring tears welling in Americans' eyes.


And speaking of James, I'll be taking dinner with him this evening.