As Anderson discusses in his Security Engineering book, debates on fredom of information about security devices, starting with locks and keys, have been around for centuries. The latest salvo in this is the US (Massachusetts State Legislature and US Federal Congress) legislative proposal sometimes referred to as the “right to repair”. This proposal is about ensuring competition in the car servicing maintenance and repair market. In recent years, somewhat like the printer manufacturers and their attempts to prevent refilling of ink cartridges or the use of third party cartridges in their printers, car manufacturers have been addding in anti-features to the electronics running inside their cars. These electronics, which minutely control many aspects of the engine operation, will refuse to recognise parts from thirrd party manufacturers annd use proprietary data access protocols and encryption keys to prevent access to the diagnostic data that allows mechanics to know which parts need cleaning/repairing/replacing. Without access to these protocols independent garages can’t work on modern cars. As Roberrt Charette points out, the age old issue of access to information being a security risk is raising its head again as roups like the police and insurers are claiming that making it a right for people to access information about the things they own also gives thieeves access to information which helps them. As Anderson pointed out, there are enough smart thieves out there, and there are enough people with access to the information anyway that it’s not a security feature to not make it more generally available. As well as claiming that thieves and their associates could use this information to steal and re-process more cars, there are claims that this would allow more counterfeit parts on the market. All these claims are the standard mistakes about security by obscurity. Enough people already have access to this information that any criminal or counterfeit parts manufacturer can already get it. The restriction of access to this material is simply a matter of placing extra barriers in the way to a competitive marketplace. Indeed, the belief that such restrictions inhibit counterfeit parts increases risk by introducing a false sense of security. (True counterfeit parts are indeed a problem as they may not be subject to the correct safety testing and/or customers may be paying over the odds for what they beleive are quality parts which are shoddily manufactured.)