memex/2_notes/2013-02-20-Information-Security.org

Information Security

• sender
• channel
• receiver
• metadata
• content

sender

channel

receiver

metadata

content

If you want to keep a piece of information secure:

1. do not know it!
2. (if you have to know it,) do not tell or show anyone that you possess the information or are even aware of its existence (steganography)
3. (if you have to show that you possess it,) do not link it to your identity (anonymity)
4. (if you have to link it to your identity,) do not share its content with anyone (keep)
5. (if you have you have to share it,) choose who you share it with (trust)
6. (if you have no control over who you share it with,) do not move it in a channel you do not own unless you have to (infrastructure)
7. (if you have no control over the channel,) encrypt.