undefined | Better HN

0 pointske88y2y ago0 comments

At the very least, one would hope that credentials and perhaps also certain design documents such as threat models aren't public.

There may also be implementation details or code which are subject to NDA, either from the Fed itself or from service providers such as IBM in this case. Sometimes you can get that info from a FOIA request, but that doesn't negate the fact that the employees working on the system are bound by an NDA. The FOIA has to happen and run its course.

0 comments

rkagerer2y ago

certain design documents such as threat models aren't public

That smells like security through obscurity (which admittedly is the status quo in the banking world).

Contrasted to approaches like Bitcoin, for which full code and whitepaper are public, and which has managed to survive every attack vector thrown at it for the last decade and a half. Not arguing for Bitcoin as money here, just highlighting the diverse approaches to security and that it shouldn't be taken as a given that hiding those details makes it more secure.

gavinsyancey2y ago

Fraud detection heuristics, at least, fundamentally have to rely on security through obscurity. If fraudsters know exactly what is detected as fraud, they can avoid detection.

Bitcoin gets around this by having absolutely no fraud prevention, and just saying "lol sucks for you should've been more careful"...

DANmode2y ago

There is fraud prevention (yes, you being careful, and more importantly, only doing transactions with parties you trust to reverse in the event of a mistake), you've just been accustomed to outsourcing this to a third party for some expected added value.

1 more reply

psd12y ago

I can't agree that Bitcoin has survived every attack vector, given the animosity over the BTC fork.

ke88yOP2y ago

LOL what? Keeping private keys private is not "security through obscurity". Or if it is then basically all security is security through obscurity.

No one is posting their private keys on github, and when they do their crypto goes poof nearly instantly. None of the exchanges publish their threat model documents. I sure as shit don't tell people where I store my private keys.

The bitcoin whitepaper and code are more analogous to the ISO standard, which is public.

everfree2y ago

I must have missed something. Wasn't the person you replied to talking about design documents? I don't think they suggested credentials like private keys should be public.

patmorgan232y ago

Non-sequitur. OP never said anything about posting private keys publicly.

They did talk about having the entire system's source code/design publicly available.

CobrastanJorji2y ago

I'm not sure "don't give out the private keys" is the sort of thing that needs a special contractual agreement.

jacobr12y ago

That is exactly that kind of thing that needs to be in a contract. When someone inevitably shares private keys and it results in some kind of financial loss ... who is responsible for the damages? Contracts codify the liability if it isn't otherwise defined by statute.

seany2y ago

> threat models

This is exactly the thing you _shouldn't_ put under NDA. What on earth?

mistrial92y ago

guess -- knowing the currently discussed threat models is a competitive advantage for the dozen fintech security firms that are in on this, and a "moat" against the other four hundred fintech security firms that are frantically trying to find a way to get inside this obviously well-funded Big Gov project.

astrange2y ago

The Federal Reserve is self funded.

1 more reply

throwawayForMe22y ago

After 9/11 everyone in the Fed working on the payments systems had to get National Security Clearance. These systems are considered critical national infrastructure. Exposing the source code will get you jail time.

j / k navigate · click thread line to collapse

0 comments

rkagerer2y ago

certain design documents such as threat models aren't public

That smells like security through obscurity (which admittedly is the status quo in the banking world).

gavinsyancey2y ago

Fraud detection heuristics, at least, fundamentally have to rely on security through obscurity. If fraudsters know exactly what is detected as fraud, they can avoid detection.

Bitcoin gets around this by having absolutely no fraud prevention, and just saying "lol sucks for you should've been more careful"...

DANmode2y ago

1 more reply

psd12y ago

I can't agree that Bitcoin has survived every attack vector, given the animosity over the BTC fork.

ke88yOP2y ago

LOL what? Keeping private keys private is not "security through obscurity". Or if it is then basically all security is security through obscurity.

The bitcoin whitepaper and code are more analogous to the ISO standard, which is public.

everfree2y ago

I must have missed something. Wasn't the person you replied to talking about design documents? I don't think they suggested credentials like private keys should be public.

patmorgan232y ago

Non-sequitur. OP never said anything about posting private keys publicly.

They did talk about having the entire system's source code/design publicly available.

CobrastanJorji2y ago

I'm not sure "don't give out the private keys" is the sort of thing that needs a special contractual agreement.

jacobr12y ago

seany2y ago

> threat models

This is exactly the thing you _shouldn't_ put under NDA. What on earth?

mistrial92y ago

astrange2y ago

The Federal Reserve is self funded.

1 more reply

throwawayForMe22y ago

j / k navigate · click thread line to collapse