4 ms·
Exactly. One of the first things we learned in my UNDERGRAD security class is that "good" security which is unduly onerous will just make users route around it
by wutbrodo 11y ago
Exactly. One of the first things we learned in my UNDERGRAD security class is that "good" security which is unduly onerous will just make users route around it and revert to plain old bad security. The canonical example was ridiculous password requirements which just make people put their password on a post it on their monitor.
As you said, security requirements that are that onerous and too rigid to relax when necessary is just shittily designed security to begin with.
- knodi123 11y ago> "good" security which is unduly onerous will just make users route around it and revert to plain old bad security I believe this picture is also a suitably canonical example. http://www.jumpoverthere.com/wp-content/uploads/2012/10/security.jpg http://www.jumpoverthere.com/wp-content/uploads/2012/10/secu...