Shostack + Friends Blog Archive


Rushed Security

Samablog, irked that Rush has stolen his joke, explains that you can get at all of Rush’s $7 a month content, just by turning off all the scripting stuff in your browser.

He then goes on to say: “What it says that a celebrity of Limbaugh’s stature keeps his site so insecure, I don’t know.”

What it means is that good security is expensive, and that cheap, easy measures will often work just as well. I’d be surprised to see Rush’s fans stop giving him $84 per year. So, by and large, Rush’s security was good enough. It remains to be seen if someone will just re-purpose his content, the way he did to Rob. If that happens, Rush will probably marginally upgrade things. It’s economically sensible.