Technological homogeneity also creates single points of failure, as we saw this week with CrowdStrike. Heterogeneity, on the other hand, can (not will, but can)

Technological homogeneity also creates single points of failure, as we saw this week with CrowdStrike. Heterogeneity, on the other hand, can (not will, but can) improve security outcomes. I remember making a comment years ago about opening PDFs in PDF.js instead of Acrobat (12 years, it turns out [1] -- PDF.js had just started shipping in Firefox). At the time, Acrobat was the standard and widely exploited, but obviously none of those exploits did anything in the browser. Still, homogeneity isn't always bad. If I were in, say, the cyber insurance racket, I'd make any company not using U2F or FIDO2 pay up. Not all choices are good choices. 1. https://news.ycombinator.com/item?id=4033804 https://news.ycombinator.com/item?id=4033804