The software we develop should have better interfaces too. A security expert should also review stuff created by UX. Back when “I love you” virus started, we h

The software we develop should have better interfaces too. A security expert should also review stuff created by UX. Back when “I love you” virus started, we had pointed out something simple as “open for read” vs “open as in run/execute” should not have had the same interface. All the new security enhancements we have today - don’t run as admin, alerts to request privileged access, sandboxing - all of them existed for a decade, but the software vendors never had the guts to weigh security higher than UX