Hacker News Reader

Doctors don't get blamed when someone they treat subsequently gets shot. Civil engineers don't get blamed when a saboteur blows up the bridge they designed.

View on HN

This is not a good analogy. Civil engineers would be blamed if a force they were supposed to compensate for, like a storm, destroys a bridge they designed.

The grey area is if attackers built a weather machine to create exactly the perfect storm tailored to stress a small design defect until it fails. Even more so when the probability of such a storm occurring naturally is 0.

That's a great analogy.

The thing is, our current understanding is that such a weather machine doesn't exist so it isn't necessary to design around it.

In the cyber security world such machines absolutely do exist so we should be expected to design around them.

Have you ever driven under the base of a large bridge (you can’t it’s restricted)? I’m sure you’ve seen the road spikes and the anti car bomb barricades put around high profile buildings… when something is valuable and a possible target of attack you protect it and make it less vulnerable.

Reply on news.ycombinator.com