We've just talked a lot about encryption and it is a fantastic tool for privacy security anonymity.
In fact I would say encryption is one of the few tools we have in security that really works and because
it's effective your adversary will avoid attacking scription directly.
In most cases he will attempt to bypass it entirely.
Adversaries who know what they are doing will always always attack the lowest hanging fruit.
They'll always be able to find the lowest hanging fruit.
They will never attempt to brute force a password for your description when it's much easier to try
to install a key lower on your system first or watch over your shoulder or send you a fishing email.
Attackers will simply try to bypass encryption.
You have to take this into account.
Security is what is called a weak link phenomena.
It's only as strong as the weakest link in the chain.
Good encryption is often the strongest link.
Those human beings are usually the weakest link in the section on OPSEC operational security.
I discuss human weaknesses in security and what to do to prevent them.
If you put a lot of effort into your security but missed something big like not patching your browser
or using poor passwords you're just as insecure as if you had done nothing.
This is the problem.
Security.
Hours after narrowly failing to murder British Prime Minister Margaret Thatcher in the Brighton bomb
the IRA calmly announced today we were lucky.
But remember we only need to be lucky ones.
You will have to be lucky.
Always attackers have the advantage.
They only have to be lucky ones and they shoot for the weak spots first.
Make sure you mitigate your weakest links first before you concern yourself over detail your security
engine needs to be running first before you even attempt to tune the engine.
People and companies often fail to take the risk based approach.
I've seen time and money spent on encrypting laptops.
When the company is doing very little against this week his spotlight browser and e-mail based attacks
which will bypass description anyway is about risk and prioritizing your time and resources to mitigate
the greatest risk.
First we discuss ways encryptions attack throughout the course and here's a good read.
I would recommend on how cryptosystems actually do fail when they are attacked.