<?xml version="1.0" encoding="utf-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title><![CDATA[[SecurityRatty] tag: dreadful]]></title>
    <link>http://securityratty.com/tag/dreadful</link>
    <description></description>
    <pubDate>Sun, 21 Oct 2007 20:00:00 +0000</pubDate>
    <generator>iRatty Engine</generator>
    <docs>http://blogs.law.harvard.edu/tech/rss</docs>
    <item>
      <title><![CDATA[Peter Gabriel Web Server Stolen]]></title>
      <link>http://securityratty.com/article/8d983272d1a993a28204fdb3bb483a93</link>
      <guid>http://securityratty.com/article/8d983272d1a993a28204fdb3bb483a93</guid>
      <description><![CDATA[Reported on Slashdot today is the news that Peter Gabriel's web server has been solen from the data center where it was being hosted. I have my own thoughts on a possible motive; mostly related to...]]></description>
      <content:encoded><![CDATA[
      Reported on <a href="http://hardware.slashdot.org/article.pl?sid=08/05/06/1639257&from=rss">Slashdot today</a> is the news that Peter Gabriel's web server has been solen from the data center where it was being hosted. I have my own thoughts on a possible motive; mostly related to some of the dreadful noise he's produced over the past 30 years.

Physical security has been a previous topic of this blog (see entry from <a href="http://www.computerweekly.com/blogs/stuart_king/2007/12/dont-forget-physical-security.html">10 Dec 2007</a>). 

1. Don't make assumptions about third party security controls. Check them for yourself. 

2. Make sure your incident response plans include actions to take in the event of critical equipment being stolen.

Some good guidance on physical security for small businesses here on <a href="http://www.getsafeonline.org/nqcontent.cfm?a_id=1098">GetSafeOnline</a>. 

Some further related information <a href="http://www.informationweek.com/blog/main/archives/2008/04/physical_securi.html">here</a>.









      
   ]]></content:encoded>
      <pubDate>Wed, 07 May 2008 09:00:00 +0000</pubDate>
      <category domain="http://securityratty.com/tag/physical security">physical security</category>
      <category domain="http://securityratty.com/tag/web server">web server</category>
      <category domain="http://securityratty.com/tag/peter gabriel">peter gabriel</category>
      <category domain="http://securityratty.com/tag/party security controls">party security controls</category>
      <category domain="http://securityratty.com/tag/previous topic">previous topic</category>
      <category domain="http://securityratty.com/tag/data center">data center</category>
      <category domain="http://securityratty.com/tag/critical equipment">critical equipment</category>
      <category domain="http://securityratty.com/tag/dreadful noise">dreadful noise</category>
      <category domain="http://securityratty.com/tag/guidance">guidance</category>
      <source url="http://www.computerweekly.com/blogs/stuart_king/2008/05/peter-gabriel-web-server-stole.html">Peter Gabriel Web Server Stolen</source>
    </item>
    <item>
      <title><![CDATA[Risk of Knowing Too Much About Risk]]></title>
      <link>http://securityratty.com/article/a9e709ef7a9e4009c206f5962e3219c7</link>
      <guid>http://securityratty.com/article/a9e709ef7a9e4009c206f5962e3219c7</guid>
      <description><![CDATA[Interesting : Dread is a powerful force. The problem with dread is that it leads to terrible decision-making
Slovic says all of this results from how our brains process risk, which is in two ways. The...]]></description>
      <content:encoded><![CDATA[<p><a href="http://www2.csoonline.com/exclusives/column.html?CID=33571">Interesting</a>:</p>

<blockquote>Dread is a powerful force. The problem with dread is that it leads to terrible decision-making.

<p>Slovic says all of this results from how our brains process risk, which is in two ways. The first is intuitive, emotional and experience based. Not only do we fear more what we can't control, but we also fear more what we can imagine or what we experience. This seems to be an evolutionary survival mechanism. In the presence of uncertainty, fear is a valuable defense. Our brains react emotionally, generate anxiety and tell us, "Remember the news report that showed what happened when those other kids took the bus? Don't put your kids on the bus."</p>

<p>The second way we process risk is analytical: we use probability and statistics to override, or at least prioritize, our dread. That is, our brain plays devil's advocate with its initial intuitive reaction, and tries to say, "I know it seems scary, but eight times as many people die in cars as they do on buses. In fact, only one person dies on a bus for every 500 million miles buses travel. Buses are safer than cars."</p>

<p>Unfortunately for us, that's often not the voice that wins. Intuitive risk processors can easily overwhelm analytical ones, especially in the presence of those etched-in images, sounds and experiences. Intuition is so strong, in fact, that if you presented someone who had experienced a bus accident with factual risk analysis about the relative safety of buses over cars, it's highly possible that they'd still choose to drive their kids to school, because their brain washes them in those dreadful images and reminds them that they control a car but don't control a bus. A car just feels safer. "We have to work real hard in the presence of images to get the analytical part of risk response to work in our brains," says Slovic. "It's not easy at all."</p>

<p>And we're making it harder by disclosing more risks than ever to more people than ever. Not only does all of this disclosure make us feel helpless, but it also gives us ever more of those images and experiences that trigger the intuitive response without analytical rigor to override the fear. Slovic points to several recent cases where reason has lost to fear: The sniper who terrorized Washington D.C.; pathogenic threats like MRSA and brain-eating amoeba. Even the widely publicized drunk-driving death of a baseball player this year led to decisions that, from a risk perspective, were irrational.</blockquote></p><div class="feedflare">
<a href="http://feeds.feedburner.com/~f/schneier/fulltext?a=2CLusHF"><img src="http://feeds.feedburner.com/~f/schneier/fulltext?i=2CLusHF" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/schneier/fulltext?a=tnoEwuF"><img src="http://feeds.feedburner.com/~f/schneier/fulltext?i=tnoEwuF" border="0"></img></a>
</div>]]></content:encoded>
      <pubDate>Thu, 06 Mar 2008 03:24:50 +0000</pubDate>
      <category domain="http://securityratty.com/tag/intuitive">intuitive</category>
      <category domain="http://securityratty.com/tag/intuitive risk processors">intuitive risk processors</category>
      <category domain="http://securityratty.com/tag/analytical">analytical</category>
      <category domain="http://securityratty.com/tag/analytical rigor">analytical rigor</category>
      <category domain="http://securityratty.com/tag/intuitive response">intuitive response</category>
      <category domain="http://securityratty.com/tag/brains process risk">brains process risk</category>
      <category domain="http://securityratty.com/tag/brains react">brains react</category>
      <category domain="http://securityratty.com/tag/images">images</category>
      <category domain="http://securityratty.com/tag/dreadful images">dreadful images</category>
      <source url="http://www.schneier.com/blog/archives/2008/03/risk_of_knowing.html">Risk of Knowing Too Much About Risk</source>
    </item>
    <item>
      <title><![CDATA[Hey, do I know you?]]></title>
      <link>http://securityratty.com/article/6d7afe8006acfe9879e70097348b776a</link>
      <guid>http://securityratty.com/article/6d7afe8006acfe9879e70097348b776a</guid>
      <description><![CDATA[My friends have gotten tired of hearing me talk about how dreadful it is to be single. One of my friends S. (who has four children and a mortgage) suggested that I take over looking after his kids...]]></description>
      <content:encoded><![CDATA[My friends have gotten tired of hearing me talk about how dreadful it is to be single. One of my friends S. (who has four children and a mortgage) suggested that I take over looking after his kids while *he* wakes up with a hangover next to a half-empty bottle of Jack Daniels and photos of a wild party and the younger sister of one of my work colleagues (Hi M!). 

Another friend, R, asked me why I don't frequent the singles bar scene. I replied that I'm looking for <a href="http://www.lyricsdepot.com/the-beautiful-south/good-as-gold.html">a sun-drenched wind-swept Ingrid Bergman kiss</a>, a heart touching romance and a soul companion -- not some sordid meaningless fling. He sagely nodded his head and voiced his hopes that I enjoy the rest of my long life looking forward to dying alone...]]></content:encoded>
      <pubDate>Sun, 21 Oct 2007 20:00:00 +0000</pubDate>
      <category domain="http://securityratty.com/tag/singles bar scene">singles bar scene</category>
      <category domain="http://securityratty.com/tag/friends">friends</category>
      <category domain="http://securityratty.com/tag/soul companion">soul companion</category>
      <category domain="http://securityratty.com/tag/half-empty bottle">half-empty bottle</category>
      <category domain="http://securityratty.com/tag/jack daniels">jack daniels</category>
      <category domain="http://securityratty.com/tag/sordid meaningless">sordid meaningless</category>
      <category domain="http://securityratty.com/tag/wild party">wild party</category>
      <category domain="http://securityratty.com/tag/friend">friend</category>
      <category domain="http://securityratty.com/tag/photos">photos</category>
      <source url="http://www.rsa.com/blog/blog_entry.aspx?id=1234">Hey, do I know you?</source>
    </item>
  </channel>
</rss>
