SwiftOnSecurity

We do ourselves a disservice, quantifying security failure as apart. It is not. It is a systems failure. And all systems are human.

The belief attackers needs to subvert security systems in order to achieve their goals is a false belief in the orderliness of human systems

This is a view rooted in cleanroom implementations of computer labs, and not the reality of corporate networks that exist to serve thousands

All failure is impossible in theories of the student. The world could not exist as it is today, merely a facade for the chaos behind it.

What a student does not know is the incredible things that can be achieved in chaos. Humans adapt to chaos. Human systems, sometimes do not.

Students, self-taught and institutional, exist in a world of nominal order they think our human universe operates within the parameters of.

Then they are kicked into chaos. A world without design. Or, instead, a world of design with no awareness of future failures sanctioned.

I know because I was that student. That young human who believed in an abstract orderly template of how the world worked. And I was wrong.