3 ms·
Most corporate security is a security theatre. I saw an InfoSec consultant on LinkedIn argue that she does not need to be technical to be a security professiona
by surfingdino 2y ago
Most corporate security is a security theatre. I saw an InfoSec consultant on LinkedIn argue that she does not need to be technical to be a security professional. Works in banking. I wouldn't be surprised if Apple had to outsource app reviews to an offshore partner, because of the sheer number of apps submitted. Quality falls at volume.
- matwood 2y agoA lot of security is human and process based. Technical is important, but the best software in the world won't survive someone being social engineered.
- talldayo 2y agoThe best software in the world is actually explicitly designed to survive being social engineered. Launching a nuclear ICBM requires more than 4 levels of remote authorization and combined secrets from 2 trusted sources that live offsite. Being "social engineered" in a situation like this means torturing a half-dozen military personnel for confidential keys you can't even validate.