3 ms·
To add a point of agreement from another security engineer - this is the best top-level comment on this story. People love to hate companies for their security
by dsacco 11y ago
To add a point of agreement from another security engineer - this is the best top-level comment on this story.
People love to hate companies for their security practices when a breach happens. It's much harder to form a dispassionate, nuanced view from a place of critical thinking.
- jessaustin 11y agoCompanies aren't people; they aren't entitled to basic human dignity and fellowship. When they fuck up and hurt people, and it's clear that their actions are "all in the game", it's time to start hating that game, perhaps enough to get the rules changed.
- vacri 11y agoI remember going to a security conference where one of the speakers said that security flaws and 'fixit' recommendations come so thick and fast, and are so difficult to implement, that even security researchers, who know all the issues and tradeoffs, often don't follow best practices. Security is bloody difficult, even for lauded members of the community. Schneier apologises in his blog when he says he still uses Windows, for example.
- reagency 11y agoWtf does schneier use Windows for, outside the lab?
- vacri 11y agoWell, I'm taking that form his 'air-gapped machine' article linked a couple of months ago, he apologised for using windows for it, due to familiarity. I don't really find Schneier interesting, so I only go by what people link to here.