Schneier on Security

The locksmiths sound vulnerable. Funny, that is exactly how I felt when I watched skilled lock-pickers open eight deadbolts in less than 30 seconds. Ironically I don't think I've ever seen a locksmith's lock picking competition; they have always been sponsored by physics departments and computer security shows.

I wonder, were locksmiths also angry at the bicyclists who announced the pen-attack story last fall? Or what about Kryptonite spokeswoman Donna Tucci when she said "Anything with a tubular cylinder could be a concern including vending machines, coin-operated machines, other security products"? Did she breach some form of "trust" by publically acknowledging a flaw?

My take on Matt Blaze's research is that it could be embraced as a big help to the locksmiths and lock business as it could actually expand the market to scrutinizing and replacing locks more often (to keep up with the disclosure of vulnerabilities, and to improve lock design). Some of the locksmith argument seems to involve market forces driving lock companies to keep costs down...the obvious answer to that is to generate demand for more secure, albeit more expensive, product.

As you say, physical security could take a few tips from the rapidly growing business of computer security; with the ubiquity of rapid information dissemination they might not have a choice.