Bruce Schneier | |||||||||||||||
Schneier on SecurityA blog covering security and security technology. « Eve Ensler on Security | Main | Friday Squid Blogging: Spicy Squid on a Stick » July 31, 2009Snake Oil SalesmanIn cryptography, we've long used the term "snake oil" to refer to crypto systems with good marketing hype and little actual security. It's the phrase I generalized into "security theater." Well, it turns out that there really is a snake oil salesman. Posted on July 31, 2009 at 1:11 PM • 14 Comments • View Blog Reactions To receive these entries once a month by e-mail, sign up for the Crypto-Gram Newsletter. A site on network security, focused on Check Point and Cisco gears... http://www.snakeoilresearch.com/ Posted by: There's More at July 31, 2009 1:19 PM It's rather ironic that real snake oil may well be a useful remedy. (see http://en.wikipedia.org/wiki/Snake_oil) Posted by: Daniel Haran at July 31, 2009 2:00 PM Thanks Bruce! My squeaky snake was really keeping me up at night! Posted by: pegr at July 31, 2009 3:01 PM @Daniel Haran is on point. The original Chinese snake oil, high in EPA (Omega-3 oils), provided relief from inflammation, particularly that associated with arthritis. Copy-cat remedies made from other animals, petroleum, and other sources, lacked that constituent and were fraudulent. Today Omega-3 oils, EPA, and DHA, are recognized for their healthy and anti-inflammatory properties. Ironic how things have come full-circle. The term "snake oil salesman" is still appropriate, though, to my mind. It identifies a class of hucksters who sell a product with claimed benefits, often based or related in some tangential way to one which actually does work, but which fails to include or correctly assimilate some essential ingredient, property, or characteristic. There's a cargo-cultism about it as well. Posted by: kmself at July 31, 2009 3:44 PM Years ago, on a roadside in Northern Mexico, I was with a friend who bought snakeoil from a real snakeoil salesman. He was also selling dried rattlesnake meat and snake skin. The snake oil was supposed to be good for rubbing on wherever it hurt. The results were not as promised. I was told that the dried snake meat tasted pretty good mixed in with scrambled eggs. Posted by: Bob Duckles at July 31, 2009 3:50 PM The (snake oil: specious security) metaphor isn't entirely inappropriate, just a bit more nuanced than commonly constructed. And perhaps its meaning is still evolving. It its original context, snake oil was and is a well respected, widely used remedy. As its popularity grew in the US, less-than-entirely-ethical folks moved to cash in by selling "Snake Oil" products containing little or no actual snake oil. So "Snake Oil" got a bad reputation. Now having developed epistemological and knowledge structures sufficient to posit a plausible mechanism of action, some biomedical practitioners are recognizing that the substance may well have beneficial physiological effects. It'd take more effort and resources to determine (in a way acceptable to biomedical research communities) the utility of snake oil. The underlying issue for the metaphor, I believe, is one of deceptive marketing. The "true product" (snake oil, security device, extended cell phone warranty, ...) may or may not be capable of delivering the functionality that's promised. With some effort, this is testable and resolvable. The problematic situation arises when the product that's being delivered (a "faux product") isn't what has been promised (the "true product") and most folks don't have the analytical equipment to recognize the fraud. Posted by: G Wood at July 31, 2009 3:56 PM By the way it's not just "real snake oil" that has beniffits. The venom of most snakes is a very complex mixture of quite interesting "poisons". If you think about it the snake venom has three purposes, 1, protect the snake by making the prey less likely to fight back. 2, Kill or imobalise the prey slowly so that, 3, get the "digestive" enzime content of the snake venom compleatly around the preys circulatory system. All of these have high utility in medicine so yeh the snake is a rich source of medicinaly active chemicals. And as one poster has noted they taste nice and are simple to cook, importantly the oil burns without visable smoke. The easy way to cook snake, 1, catch / kill / skin / gut. The heat from the alcohol burning releases the oil which starts to burn and the protien rich flesh quickly cooks in the burning oil. Quick (almost) easy hot food without smoke to give away your position. Posted by: Clive Robinson at July 31, 2009 6:59 PM @ kmself, "The original Chinese snake oil, high in EPA (Omega-3 oils), provided relief from inflammation, particularly that associated with arthritis." It worked especialy well with traditional Chinese "thousand year" eggs. The eggs where fresh chickens eggs that where pickeled in their shells for a month. The resulting egg looks like a hard boild egg that has been over cooked in that it is a very dark colour. Oh I forgot to mention that the egg was so usefull because it was very high in steroids which as we know today have all sorts of usefull medicinal properties. The egg it's self did not have any steroids, it simply concentrated them from the pickling liquid which was the urine from a pregnant mare... Before you think uck or whatever modern non traditional eggs use an entirely different pickling solution as the genuine artical for obvious reasons is prohibited from sale in most parts of the world. Posted by: Clive Robinson at July 31, 2009 7:08 PM >The egg it's self did not have any steroids, it simply concentrated them from the pickling liquid which was the urine from a pregnant mare... That doesn't seem to be true. Posted by: Anonymous at August 1, 2009 1:38 AM Well, it seems the genuine article is unreasonably malingned. But this is even better! You can call stuff snake-oil and if you are called on it, you can appear wise by explaining that it is really faked snake-oil that is the problem! Posted by: Gweihir at August 1, 2009 1:13 PM I prefer the terms "ophidilipid" and "oleophidian". Posted by: mac the naïf at August 2, 2009 4:26 PM Snake oil is so last century. The new crook is the magnetic underlay salesman. Posted by: Jared Kells at August 2, 2009 10:15 PM @kells "new crook is the magnetic underlay salesman" Well the autobody undercoaters had to go somewhere Posted by: bf skinner at August 3, 2009 5:07 AM Post a comment
Powered by Movable Type. Photo at top by Steve Woit.
Schneier.com is a personal website. Opinions expressed are not necessarily those of BT. |
|
Comments