Risk
It’s Not Information Overload. It’s Filter Failure.
This piece from Clay Shirky isn’t new, but it’s sure still absolutely relevant. http://www.youtube-nocookie.com/embed/LabqeJEOQyI?rel=0
Security utopia
The problem I’ve most often met in building secure systems is that this particular subject seems to bring out the utopian in people like no other. This ‘should’ happen, that ‘should’ happen, its unfair or wrong or wicked that such and such is allowed to continue. Well, yes. But what are we actually going to [...]
Trust comes from knowing….
” Trust comes from knowing, not from blind faith. And to know one must understand, and to understand one must have an intimate awareness of what conditions are truly present, what people do and what they don’t, how people do what they do and don’t.” Michael Gerber, “The E-Myth Revisited“
Bruce Schneier: The security mirage
The feeling of security and the reality of security don’t always match, says computer-security expert Bruce Schneier. At TEDxPSU, he explains why we spend billions addressing news story risks, like the “security theater” now playing at your local airport, while neglecting more probable risks — and how we can break this pattern.
Ralph Langner: Cracking Stuxnet, a 21st-century cyber weapon
A superb piece from TED.com with Ralph Langer clearly explaining the internal workings of Stuxnet, a 21st-century cyber weapon.
Backwards Maxim
“Most people will assume everything is secure until provided strong evidence to the contrary. Exactly backwards from a reasonable approach.” Anon.
Misjudging risk (and bad decisions)
I’m a huge Seth Godin fan. This is a particularly good post that especially resonates with me: Misjudging risk (and bad decisions).
Right risks
Love this quote: Safe is good for sidewalks and swimming pools, but life requires risk if you are to get anywhere. http://twitter.com/simonsinek/status/4545842635603968