The myth of cyber-security
網(wǎng)絡(luò)安全的神話
Leaving the windows open
門戶大開
This is not a counsel of despair. The risk from fraud, car accidents and the weather can never be eliminated completely either. But societies have developed ways of managing such risk—from government regulation to the use of legal liability and insurance to create incentives for safer behaviour.
這并不是絕望的建議。來自詐騙对室、交通事故以及氣象災(zāi)害的風(fēng)險同樣無法完全避免进苍。但社會已經(jīng)發(fā)展出各種方式來控制這些風(fēng)險——從政府監(jiān)管到強制法的使用以及運用保險來刺激更安全的行為旺韭。
Start with regulation. Governments’ first priority is to refrain from making the situation worse. Terrorist attacks, like the recent ones in St Petersburg and London, often spark calls for encryption to be weakened so that the security services can better monitor what individuals are up to. But it is impossible to weaken encryption for terrorists alone. The same protection that guards messaging programs like WhatsApp also guards bank transactions and online identities. Computer security is best served by encryption that is strong for everyone.
首先是政府監(jiān)管。政府的首要任務(wù)就是避免情況變得更加糟糕。像最近發(fā)生在圣彼得堡和倫敦的襲擊厂庇，常常會使得人們想到通過降低加密措施來方便監(jiān)視人們的一舉一動。但我們做不到僅僅是針對襲擊者來降低他們的加密措施输吏。運用于 WhatsApp 和銀行交易以及在線身份認(rèn)證的的加密措施并沒有什么不同权旷。計算機安全措施平等地服務(wù)于所有人。
The next priority is setting basic product regulations. A lack of expertise will always hamper the ability of users of computers to protect themselves. So governments should promote“public health” for computing. They could insist that internet connected gizmos be updated with fixes when flaws are found. They could force users to change default usernames and passwords. Reporting laws, already in force in some American states, can oblige companies to disclose when they or their products are hacked. That encourages them to fix a problem instead of burying it.
下一個重點在于為基礎(chǔ)產(chǎn)品設(shè)立規(guī)則评也。缺少經(jīng)驗將始終妨礙計算機用戶成功地保護自身炼杖。所以政府應(yīng)該提高計算機的“公共健康”。政府可以要求聯(lián)網(wǎng)設(shè)備在發(fā)現(xiàn)漏洞的時候得到更新盗迟±ば埃可以強制用戶更換用戶名和密碼。在美國有些州的法律已經(jīng)要求公司在發(fā)現(xiàn)自己的產(chǎn)品被入侵時應(yīng)當(dāng)公開消息罚缕。這將使得他們?nèi)ソ鉀Q問題而不是掩蓋問題艇纺。
