<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
		>
<channel>
	<title>Comments on: Quick Quiz on Risk</title>
	<atom:link href="http://spiresecurity.com/?feed=rss2&#038;p=502" rel="self" type="application/rss+xml" />
	<link>http://spiresecurity.com/?p=502</link>
	<description>Risk and Cybersecurity Analysis</description>
	<lastBuildDate>Wed, 21 Aug 2013 23:28:51 +0000</lastBuildDate>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	<generator>http://wordpress.org/?v=3.5.1</generator>
	<item>
		<title>By: Chandler Howell</title>
		<link>http://spiresecurity.com/?p=502&#038;cpage=1#comment-790</link>
		<dc:creator>Chandler Howell</dc:creator>
		<pubDate>Fri, 02 Dec 2005 22:06:53 +0000</pubDate>
		<guid isPermaLink="false">http://spiresecurity.com/blog/?p=502#comment-790</guid>
		<description><![CDATA[If you want to start tap-blocking every phone call you send or receive, then you&#039;re by definition increasing the expected rate of occurrence of a wiretap being blocked.  Since the number of wiretaps is greater than zero, any blocking increases the risk of a tap being blocked by definition.

The more interesting question is, &quot;What is the increase in the risk that information relevant to the warrant which granted the wiretap will now be missed?&quot;  This requires a lot more data and assumpions than I&#039;m going to get into at this time.


Also, I still want to know why, if the target doesn&#039;t believe their line might be bugged, we would expect them to be mitigating the risk?

From a pure Risk Management perspective, implementing a countermeasure if you don&#039;t  believe there is a threat is irrational behavior since the assessed risk would be zero.
]]></description>
		<content:encoded><![CDATA[<p>If you want to start tap-blocking every phone call you send or receive, then you&#8217;re by definition increasing the expected rate of occurrence of a wiretap being blocked.  Since the number of wiretaps is greater than zero, any blocking increases the risk of a tap being blocked by definition.</p>
<p>The more interesting question is, &#8220;What is the increase in the risk that information relevant to the warrant which granted the wiretap will now be missed?&#8221;  This requires a lot more data and assumpions than I&#8217;m going to get into at this time.</p>
<p>Also, I still want to know why, if the target doesn&#8217;t believe their line might be bugged, we would expect them to be mitigating the risk?</p>
<p>From a pure Risk Management perspective, implementing a countermeasure if you don&#8217;t  believe there is a threat is irrational behavior since the assessed risk would be zero.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Pete</title>
		<link>http://spiresecurity.com/?p=502&#038;cpage=1#comment-789</link>
		<dc:creator>Pete</dc:creator>
		<pubDate>Thu, 01 Dec 2005 23:38:33 +0000</pubDate>
		<guid isPermaLink="false">http://spiresecurity.com/blog/?p=502#comment-789</guid>
		<description><![CDATA[@Chandler -

A good point, but what about the case where the target doesn&#039;t believe the line is bugged, but it actually is (presumably the case with ALL successful wiretaps)? Since it is a simple protection mechanism for targets, there is no reason not to send the signal during all conversations.
]]></description>
		<content:encoded><![CDATA[<p>@Chandler -</p>
<p>A good point, but what about the case where the target doesn&#8217;t believe the line is bugged, but it actually is (presumably the case with ALL successful wiretaps)? Since it is a simple protection mechanism for targets, there is no reason not to send the signal during all conversations.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Chandler Howell</title>
		<link>http://spiresecurity.com/?p=502&#038;cpage=1#comment-788</link>
		<dc:creator>Chandler Howell</dc:creator>
		<pubDate>Thu, 01 Dec 2005 23:19:11 +0000</pubDate>
		<guid isPermaLink="false">http://spiresecurity.com/blog/?p=502#comment-788</guid>
		<description><![CDATA[While I already posted my own opinion about this paper, I didn&#039;t answer that question exactly.

I&#039;d say the risk is the same in your case because if a wiretap target believes their line is bugged, they will avoid the wiretap risk, not mitigate it by exploiting vulnerabilities in the wiretap system.
]]></description>
		<content:encoded><![CDATA[<p>While I already posted my own opinion about this paper, I didn&#8217;t answer that question exactly.</p>
<p>I&#8217;d say the risk is the same in your case because if a wiretap target believes their line is bugged, they will avoid the wiretap risk, not mitigate it by exploiting vulnerabilities in the wiretap system.</p>
]]></content:encoded>
	</item>
</channel>
</rss>
