3 ms·
> Then, he says security in his testing improved from 4 minutes to 1 hour to break thanks to awareness from all the breaches in the news that he implies are par
by newsignup 11y ago
> Then, he says security in his testing improved from 4 minutes to 1 hour to break thanks to awareness from all the breaches in the news that he implies are partly due to full disclosure.
We can think of it as a silver lining.
- nickpsecurity 11y agoI think it's more a necessity given human nature and these types of people (i.e. head in sand). A known weakness of human mind is responding go immediate threats more than what data shows it even if data is clear and is a huge threat. People also react better to stories. Both full disclosure and breaches in media create the impression of immediate threat with incentives to CYA or do some real security. So, more like parents slapping their kids hands or spanking them for trying to touch a hot stove except with most kids continuing despite all the burned hands and sore asses around them. Crazy stuff. It's why I don't worry what happens to the careless anymore as they cause their own problems. Full disclosure mainly benefits those who pay attention and try to keep a solid baseline.