In this time of increasing digital communication, more and more aspects of our life become targets for digital theft. The problem is exacerbated where the magnificent increases in computing power make it harder still to be secure. The door to our digital home is growing larger and more porous with every advancement in technology and convenience. I am beginning to steer my career towards these security issues. I aim to become a systems security consultant or something of the like. As such I would like to begin by consulting you.
Very smart people are creating some amazing encryption technologies. These are further scrutinized and improved by countless more smart people. Have we realized absolute security? Only time will tell, but enough experts suggest that only sheer computing power stands between these encryptions and their content. If this is the case, the raging growth of computing power will soon rush over our walls. Thus security is not solvable problem, but an ongoing battle.
If a good encryption was all it took then we’d be pretty well off, at least for the present computing environment. Unfortunately, security is not a lock, it’s more like a lock and chain. In most cases it’s a reasonably strong lock on a pathetic chain. If the chain is broken the lock does no good. The weakest link in this proverbial chain is by far the human link. There have been clever ways to reduce this link. One example is the advent of the public/private key encryption. No longer does a single key have to be shared between two parties. Once we had a weak link in the messenger of the key; now it’s no link at all.
However there are still many links of human nature with a high potential for weakness. All to often this potential is fully realized. Such links are passphrases or the safe keeping of the keys. There is hope, though. Just because the human link tends to be disproportionately weak doesn’t mean it has to be. Some general rules for strengthening our security include strong passwords. This doesn’t mean something unpronounceable (let alone memorable). It does mean something that’s not in a dictionary. I like to take words from different languages and phonetically smash them together. Something I like. Something I can subvocalize and remember. Another strength strategy is to increase the number of doors to break through. This is done by varying your passwords. If you have one password for all things all it takes is one password leak, perhaps from your favorite fad web site, and your entire security system comes crashing down. If a different password for every application is too much to remember, perhaps try classes of passwords. Use one password for trivial things, one for run of the mill accounts, and one or many for the real sensitive things, for example. Lastly, never divulge sensitive information over insecure channels, ever!
There are so many more ways the human link can be exploited. The best practice is education. If you’re worried about security you should be constantly educating yourself, finding and strengthening your weakest links. This is especially true if your worried about someone else’s security (your employers, for example). If you are an employer then hire someone who is well educating in the pitfalls and solutions of security, and one who will remain thus educated. If you’re just Joe User, only marginally worried about it, you should at the very least follow the guidelines listed above.
As stated before, security is an ongoing battle, both for the cypher writers and for the humans that use it. It’s a race between technology and technology, between the sly and the savvy. If you just learn something every month and apply it you’ll be far ahead of the masses. Stay on top of the game, even if it’s just through baby steps.