HN Hall of Fame Weekly email

Dumb Ideas in Computer Security (2005)

www.ranum.com Essays & writing Essays & articles Security & privacy Class of 2023-01 Hall of Fame
Screenshot of www.ranum.com captured 2026-07-20
Page preview · captured 2026-07-20

Resurfaced independently across 6 calendar years, with breakout response in 2 of them.

submissions
7
submitters
7
observed span
2009–2023
peak thread · 198 comments
265 pts
latest 20+ return · 2023-01-25
265 pts

Submission timeline

2007–2026

One slot for every year since HN launched. Height is that year's peak points; orange marks a 100+ point or 50+ comment breakout. Select a bar to open its strongest thread.

First comments on top threads

HN comment order

The most recognizable form in which the "Default Permit" dumb idea manifests itself is in firewall rules. [...] The opposite of "Default Permit" is "Default Deny" and it is a really good idea. And now you know why everything from version control systems to video conferencing software tunnel things over HTTP!

Wouldn't it be more sensible to learn how to design security systems that are hack-proof than to learn how to identify security systems that are dumb? Isn't this line inherently contradictory, how can a person make a system hack-proof ( as if it is possible ) if he doesn't know how to identify the vulnerabilities he could be introducing into it by doing something a particular way. Anyway the only good thing I got out of it was Personal Observations…

The first top-level comment from each of the four biggest threads, in HN’s own order. Excerpts are shortened; open a comment for full context.

Breakout years
2

100+ points or 50+ comments

Total points
431

reference only — not used in Hall rules or ranking

Total comments
274

reference only — not used in Hall rules or ranking

Every submission

DateTitle as submittedByPointsComments
2009-03-19The Six Dumbest Ideas in Computer Securitylsb4420
2015-01-02Dumb Ideas in Computer Security (2005)First breakoutcorv11456
2015-05-05The Six Dumbest Ideas in Computer Security (2005)singold20
2016-12-19The Six Dumbest Ideas in Computer Security [2005]anschwa20
2017-01-11The Six Dumbest Ideas in Computer Securitymikecarlton10
2019-09-10The Six Dumbest Ideas in Computer Securitymgreenleaf30
2023-01-25The Six Dumbest Ideas in Computer Security (2005)Hall induction · Best thread · Latest 20+ point returnblockloop265198