3 ms·

I expect people to do their best, within their capabilities. Nana and Papa are not technologically literate enough to perform the kinds of configurations you s

by urthor 4y ago

I expect people to do their best, within their capabilities. Nana and Papa are not technologically literate enough to perform the kinds of configurations you suggest. In depth custom password manager configuration isn't for them. They are not at fault for that. We simply cannot expect all of humanity to be that technologically literate. There are many, many roles in life that don't involve electronic devices that are immensely valuable. I think that's what I'm deeply offended by. It's not feigned. But I apologize I don't mean to imply you are talking in bad faith. That's out of line. My view is. Engineers cannot expect untrained, ordinary, people in the real world to operate and install complex software. We have a responsibility to provide them with secure devices they can use. Privacy and security from bad actors is a moral right.

BuckRogers 4y ago
My view is best stated that I think people are more capable than they think they are. And I'm unsure people even attempt a try at most things. Maybe that's a negative view but I feel that's what I've observed. I don't worry too much because most of the most important entities, such as say Social Security in the US forces 2FA on users. I just signed up on that site the other day, and they simply force you to do everything securely, or you don't get in. I found the process lengthy, but appropriate and well-done. That's a great example of how to secure something important without waiting on industry to solve everything. I agree password management is one of the most difficult parts of the average person's digital experience. Until it's solved through a universal pact by Google/Microsoft/Apple, the built-in password manager on iOS is pretty decent for those types of users. Passkey is a good step in popularizing a solution.
- urthor 4y ago
  My issue is that I've seen people attempt to do these things. And fail miserably. One project I've worked on, something like 5-10 out of every 200 people successfully misspelt their own name in text forms. Non-professionals create human error. The more details the non-professional has to configure, the higher the percentage of human errors across your userbase. The issue is, in device security, human error is not acceptable.

by urthor 4y ago

BuckRogers 4y ago

My view is best stated that I think people are more capable than they think they are. And I'm unsure people even attempt a try at most things. Maybe that's a negative view but I feel that's what I've observed. I don't worry too much because most of the most important entities, such as say Social Security in the US forces 2FA on users. I just signed up on that site the other day, and they simply force you to do everything securely, or you don't get in. I found the process lengthy, but appropriate and well-done. That's a great example of how to secure something important without waiting on industry to solve everything. I agree password management is one of the most difficult parts of the average person's digital experience. Until it's solved through a universal pact by Google/Microsoft/Apple, the built-in password manager on iOS is pretty decent for those types of users. Passkey is a good step in popularizing a solution.

urthor 4y ago
My issue is that I've seen people attempt to do these things. And fail miserably. One project I've worked on, something like 5-10 out of every 200 people successfully misspelt their own name in text forms. Non-professionals create human error. The more details the non-professional has to configure, the higher the percentage of human errors across your userbase. The issue is, in device security, human error is not acceptable.