5 ms·
It’s easy to target poor security as the culprit, but it seems another root cause is such bad UX of official, secure communication channels that drove these age
by seancoleman 8y ago
It’s easy to target poor security as the culprit, but it seems another root cause is such bad UX of official, secure communication channels that drove these agents to chat in this alternative, vulnerable system.
Just as a river follows the path of least resistance, so too will users follow the best UX software. Bad UX kills.
- njharman 8y agoUX can't provide security. It can only provide better UX. Security is a spectrum from convienent/useful to secure. They are mutually exclusive characteristics. Perfect UX won't remove inconvience of having to preaarange deliver of one time pads, biometric twofactor auth, waiting out of band confirmation of your identity, etc. All of those can have horrible UX on top of the inconvienence. But even with perfect UX they will never be frtionless as being able to use any device, on any network, using any app/OS, to post on a useless/passwordless site.
- njharman 8y agoAs an example. Having the internet searchable is useful, us convienent. But it reduces security because of its convienence. This breach would not have happened without that convienence. UX could have made it easier to remember to robots file. So could process, or review or other security practices. But no UX is gonna solve fact that internet is insecure due to its convienence. The internet can never be secure. At best you can get lower levels of insecurity.