5 ms·
The article is very slightly more nuanced but the conceptss the title purports is DANGEROUSLY INCOMPETENT for any security expert / discussion / context. 1) id
by njharman 10y ago
The article is very slightly more nuanced but the conceptss the title purports is DANGEROUSLY INCOMPETENT for any security expert / discussion / context.
1) idea that security is something you check off and be done with is dangerously wrong. Security must be continuous, must be updated, reviewed, etc.
2) idea that you can "encrypt" [secure] your entire life is ludacris and leads to many dangerous security misconceptions. You don't even have control of your entire life, let alone ability to secure it. Most the data on you is owned by others and not even available to you to secure. The world is not private or secure. Everyone needs to know and think about this when they are tweeting, sexting, talking shit about future president and then being surprised when SS comes to investigate.
3) idea that security is either on/off, a binary, that you can be secure or not. Is False and leads to extremely poor security choices, over/under securing. Nothing is secure. There is not such thing as SECURE. Things lie on a gradient of security from easy to break to impractically difficult. Things on the impractical to break technically end are still broken due to social engineering, externalities (power consumption of cpu), poor practices surrounding item, etc. Security is making the effort required to get an item greater than the value of getting the item.
- vaishaksuresh 10y ago> your entire life is ludacris I'm sure you means ludicrous and not https://en.wikipedia.org/wiki/Ludacris https://en.wikipedia.org/wiki/Ludacris
- newman314 10y agoI always tell my customers: "Security is a lifestyle, not a checklist"
- mmagin 10y agoOversimplifying things like this bugs me too. There are some non-easy choices to make. e.g. do you encrypt your backups? if you encrypt every copy of everything you have and you lose your passphrases, it's gone. This may be obvious to the cypherpunks in the audience, but to the average user out there, they're not necessarily so prepared to deal with that.