3 ms·

Security has trade offs that need to be carefully weighed for each situation before some appropriate decisions are taken (with the benefit of knowledge). But a

Security has trade offs that need to be carefully weighed for each situation before some appropriate decisions are taken (with the benefit of knowledge). But a big hurdle here is that the target audience has a critical need to have very good protective measures in place but is also at the same time very likely not to know about the trade offs or how to weigh the trade offs or even have a relatively good understanding of the basis of the trade offs. Hence the need for generic advice that could be easier to follow for most people while providing a better set of protections than the status quo (with the status quo being not even considering the security part and making assumptions based solely on habit and convenience). Anyone who has taken some of this advice to heart and still is unsure would usually find a way to ask people who know better for tailored advice.

coretx 8y ago
For a general statement I agree with you. I find it even a good thing to teach everyone, not just journalists, basic data hygiene. The target audience set however is far from general. They are journalists and non-profits. Such entities have adversaries such as https://en.wikipedia.org/wiki/Tailored_Access_Operations https://en.wikipedia.org/wiki/Tailored_Access_Operations haunting them. Even most well trained security professionals are far from qualified enough to deal with such actors. In other words, people should be honest with the journalists and tell them they are not competent enough to assess or commit trade offs. On most occassions, knowing you are not secure is the best security you can get as it alters your behaviour accordingly.