security

Unfortunately, people sometimes do not seriously think about which is really the weakest link in a security system. And there is also a more subtle issue: strengthening a link may cause the attacker to change his strategy, with undesirable consequences. I remember a story about some car anti-theft devices being "too" secure in making hot-wiring difficult, so that they actually caused an increase in carjackings. It is probably better (as well as much safer) to discover that one's car has been stolen when returning to the car park...

(comic from xkcd)

...when one is drunk (from xkcd).

The word hacker is usually related to computers and computer networks, and it even appears in the Internet Users' Glossary (RFC 1983) with the following definition:

hacker: A person who delights in having an intimate understanding of the internal workings of a system, computers and computer networks in particular. The term is often misused in a pejorative context, where "cracker" would be the correct term.

Computers and computer networks are explicitly mentioned, but "in particular" and not as the only possibility. Bruce Schneier goes beyond this, giving a more general definition, with no reference to that specific field:

A hacker is someone who thinks outside the box. It's someone who discards conventional wisdom, and does something else instead. It's someone who looks at the edge and wonders what's beyond. It's someone who sees a set of rules and wonders what happens if you don't follow them. A hacker is someone who experiments with the limitations of systems for intellectual curiosity.

This is maybe a bit provocative (as Schneier says in his article, which I recommend, Galileo was a hacker!), but I think it gets the point: it is not just a matter of technical skills, it is most of all a mindset. I recommend another reading: The Hacker Ethic and the Spirit of the Information Age by Pekka Himanen.

The wire protocol guys don't worry about security because that's really a network protocol problem. The network protocol guys don't worry about it because, really, it's an application problem. The application guys don't worry about it because, after all, they can just use the IP address and trust the network.

— Marcus J. Ranum

Unfortunately this happens...