Unfortunately, security properties address one piece of the overall goal, and are sometimes conflicting. So you have to first identify what _your_ goal is, in terms of security, and implement measures that apply to the properties that are important to that goal.

Security isn’t binary. We need to somehow teach people to think in terms of simple threat models.

Us: Use MFA for security
Everyone: OK, secure!
Us: Well, only if you’re not being phished, and no one can subvert the delivery mechanism, and …
Everyone: 🙄

+1

So Soft, so ICEy

Wow, that’s high praise. Ordering

num

Glad to see you’ve gotten on board the Binja train 🚂 😋

There are some legacy security professionals that wear “I don’t code” as a badge of honor, but they’re dying out. Just like traditional system administration was replaced by devops.

how to software, any day.

Although my background is in vulnerability research, this is not only applicable to finding vulns, appsec, etc. Security operations, network security, etc.  automation is the future (current in mature orgs).

…