#infobex — Public Fediverse posts on home.social

Why do so many people take against actionable low friction security advice?

It seems like a huge chunk of the industry is incapable of doing any form of accurate risk assessment or understand that most people's personal risk tolerance is different to theirs or to a company's. Which is part of the underlying worry for personal security - people are happy with quite high risk/data handover if it's low friction (because low friction is what people want).

But offer simple things for people to do to improve their security a little, like using bookmarks, any form of password manager with autofill etc seems to cause rage with people diving in with how autofill is the devil, edge cases, people should assess links etc.

No.

Low friction. Easy. Implementable by someone with few tech skills. Stuff that makes their day to day easier and faster. Those WILL get used by people. High friction/high skills based things WILL NOT get used. Most people are not high risk of being personally targeted. Most people can benefit from using bookmarks and password managers.

Some security is better than none. What this industry is doing is making security so complex and high friction that people will have zero security because it's too hard.

Make security low friction. Make it easy. BE HAPPY THAT PEOPLE CAN DO SOME SECURITY even if you personally like to live with a million complex set ups.

Your risk appetite is not the same as anyone else's.

#criticalthinking #infosec #infobex #education #training #dobetter #cybersecurity #security #securityawareness #informationsecurity #cybersecurityawareness #cyber #tech #cybersecuritytraining #securitytraining #risk #riskmanagement