Conversation

Replying to
3/ Original Internet security culture was/is weak because of some mix of RCRC-RERO, NSA, key leverage ideas like blockchain being in future
3
1
Replying to
5/ State of s/w security culture: industry spends too much on security theater that does nothing, too little on fundamental advances
2
8
Replying to
7/ Both usability and security as conceived today seem to require systems-level mental models of full product in like week 1 of project
3
13
Replying to
8/ But you can't fully model either user behavior or threat environment that early, to build usability/security "theory" into product DNA
5
8
Show replies