3 ms·
Good security experts know a security feature can’t sabotage usefulness or usability or people won’t use it. Another gripe I have about infosec people is that
by api 5y ago
Good security experts know a security feature can’t sabotage usefulness or usability or people won’t use it.
Another gripe I have about infosec people is that they tend to fear the wrong things. They tend to be paranoid about the minutia of network firewalls and encryption while ignoring the fact that most compromises are inbound and due to malware or phishing.
They will obsess over how “smooth” the firewall is, then type “npm install” as root on production.
- staticassertion 5y agoThere's a lot of "security experts" getting thrown around here. None of my peers in security would tell you that malware/ phishing are anything other than the #1 threat to your organization 99% of the time. We all have dealt with stupid security people just as we've all dealt with stupid people in general. It's unfortunate but competency is on a power curve across disciplines.