11 February 2015

Individually, we simple humans find risk a hard concept to manage. And if that’s true of individuals, it’s also true of groups which explains just why selling increased security or DR budgets to your executive Board is hard, and why actuaries are so well paid. Bruce Schneier’s excellent post on perceived and actual risk is a great place to begin exploring how […]

Passwords really are awful. I could write an entire post about what an awful concept the password is to base our entire security paradigm on. Yet, still they persist, in the face of constant and public evidence that they don’t really work. They are particularly flawed because they are just not designed for people to use –