Fire, Brimstone, and Bad Security Decisions
summary
Argues that resilience means planning to back out of long‑standing choices and gives concrete signs and fixes: obsolete policies like password rotation every 90 days spawned password managers such as 1Password; security added as separate software becomes antivirus as original sin and a multibillion dollar industry; look for indicators like 10 users sharing one login, piling exceptions, short commit messages as technical debt; use tools and practices like RunZero mapping, incremental rollbacks, failure criteria, and tie remediation to business projects.
AI-written summary · about
chapters (7)
- 0:00Introduction to bad decisions
- 3:58Origins of security decisions
- 13:31Assumptions behind security strategies
- 21:49Security for all users
- 31:03Changing course in security
- 37:52Recovering from wrong choices
- 44:52Embracing learning in security
related talks
43mSecurity By Design
32mSoftware security as a force of nature
28mSecurity Basics: Burn It All and Start Over
57mMaking Security Priority Zero
26mThe Risky Business of Risk Illiteracy (Sean Juroviesky)
53mOptimistic Security
31mAn Ant in a World of Grasshoppers
50mYou’re Doing It Wrong! Common Security Anti Patterns