"The user ... is the enemy" -- since 1999
Remember the Processor Serial Number fight? I forgot about this, but an engineer who's been around the security world for a while reminded me that David Aucsmith (then at Intel) said some things that sound pretty familiar today:
"This is a new focus for the security community," said David Aucsmith, security architect for chip maker Intel. "The actual user of the PC -- someone who can do anything they want -- is the enemy."
His comments came at the Intel Developers Forum here Thursday as the company outlined its security plans. The discussion included Intel's controversial chip ID registration technology in the new Pentium III microprocessor.
Aucsmith said that more and more, software companies and content creators are targeting users as a major threat to security.
The reason: With a few keystrokes, users could freely distribute "bits that have value," said Aucsmith -- copying such content as software, DVD video and other valuable data.
Aucsmith pitched the problem as one in which Intel's processor serial number scheme can help. "Security enforces trust," he said. "We want to ID the machine that holds this data to be able to protect it."