The Security Mindset - Schneier on Security
Uncle Milton Industries has been selling ant farms to children since 1956. Some years ago, I remember opening one up with a friend. There were no actual ants included in the box. Instead, there was a card that you filled in with your address, and the company would mail you some ants. My friend expressed surprise that you could get ants sent to you in the mail. I replied: “What’s really interesting is that these people will send a tube of live ants to anyone you tell them to.” Security requires a particular mindset. Security professionals—at least the good ones—see the world differently. They can’t walk into a store without noticing how they might shoplift. They can’t use a computer without wondering about the security vulnerabilities. They can’t vote without trying to figure out how to vote twice. They just can’t help it...
Uncle Milton Industries has been selling ant farms to children since 1956. Some years ago, I remember opening one up with a friend. There were no actual ants included in the box. Instead, there was a card that you filled in with your address, and the company would mail you some ants. My friend expressed surprise that you could get ants sent to you in the mail. I replied: “What’s really interesting is that these people will send a tube of live ants to anyone you tell them to.” Security requires a particular mindset. Security professionals—at least the good ones—see the world differently.…
saved by
related reading
- On Seeing Through and Unseeing: The Hacker Mindset · Gwern.netgwern.net
- Moxie Marlinspike >> Blog >> Career Advicemoxie.org
- Mental Models: The Best Way to Make Intelligent Decisions (~100 Models Explained)fs.blog
- How to Think for Yourselfpaulgraham.com
- How To Understand Thingsnabeelqu.substack.com
- How to Think for Yourselfpaulgraham.com
- How to Think for Yourselfpaulgraham.com
- How to Think for Yourselfpaulgraham.com
- Ideas for Startupspaulgraham.com
- It’s All Quiet On The SOC’s Frontdoingcyberstuff.substack.com
- Anti-advice: the opposite of what experts tell youengineeringx.substack.com
- The three dreams about the future of security that are not likely to come true anytime soonventureinsecurity.net