Two interesting articles posted on Slashdot today:

The Six Dumbest Ideas in Computer Security

Computer Security is a myth that is perpetuated mainly by those with a product to sell. The general assumption is that security in computing is achievable, yet time after time we see that this isn't the case. Rather than focusing on specific solutions and methodologies, this article attempts to highlight the reasons why the contemporary way of thinking about computer security is contributing to the problem. While I partially don't agree with points 3 (the "Penetrate and Patch" approach should still be employed even with a secure design approach) and 5 (there needs to be a balance between education and native usability), the ideas in here are solid and well thought out. I believe the "trust nothing" approach can be applied to all aspect of all computing systems. With that first and foremost in mind in any computing related endeavor, Computer Security should be more achievable than without it.

Don't dumb me down

I don't know about you, but every time that I hear, see, or read some report on some scientific "breakthrough", etc, I get quite annoyed because of the apparent misrepresentation and lack of details. This article doesn't so much attempt to explain some of the issues surrounding science reports but rather to poke fun at it and the people who write them. Nevertheless, it makes for an interesting read.

Well, I thought they were interesting...