Can we please stop pretending there is anything such as an anonymous transaction? We’ve been saying forever that obscurity isn’t security, and the reality is the second it’s important to find out who bought what and when, it will be found out. https://t.co/ERLoLuSaUe
@katie_reusze Kudos on Network+! WAY back in 1998 I took Microsoft’s Networking Essentials exam. I promise you those are skills you will *never* regret having, and will differentiate you throughout your career. :-)
@sec_studio The roadblock is executive level buy-in that the time and attention to training and education is worth it. That the extra steps for focused secure code review are worth it. That’s where a CISO can really shine… gaining that buy in and support.
@AlyssaM_InfoSec Zero idea, but I figured if an inexperienced user can recover from a dive in a high stress situation there must be something relatively intuitive in the design.
@tarah We’re still very much in a world of risk mitigation for authentication. If one vendor stores/handles passwords in a weak manner, and another has an insecure implementation of MFA or my cellular provider is a little too eager to help, my unique password is what saves me.