4 ms·
> Your experiences with UK IT make for depressing reading. I am astonished that even skilled techies don't take security seriously, using passwords like their
by m0nty 9y ago
> Your experiences with UK IT make for depressing reading.
I am astonished that even skilled techies don't take security seriously, using passwords like their car registration or company name - I've seen that with a military contractor, ffs. People who had signed the Official Secrets Act and had network links into supposedly secure sites. It depresses me too.
- graphitezepp 9y agoFrom my perspective its a fundamental problem with incentives. Good security costs time and money, never gets return gains, and no one will put money up that wont ever see a ROI. So incredibly short sighted, depressing indeed.
- sqeaky 9y agoPeople have this insane notion that one line of defense is enough or they have the equally insane notion that no wants to take something they have. People have a really hard time evaluating simple risk/reward models. You have to make the reward of attacking you higher than any possible reward to have a reasonable chance at security. If anyone anywhere on the Internet can profit by your loss, eventually someone will try. EDIT - To make life even more difficult sometimes the attack provides gains indirectly. Imagine one group of politicians attacking a service supported by another political faction, just that service going down profits the first group if it changes who voters vote for.