[WaybackSave/Archive] Automation can’t fix broken security basics – Help Net Security reveals nothing new: like in many places, automation isn’t the solution for bad processes or bad behaviour. Automation just assists getting things done (even in security), only marginally leading people to getting these things right in addition to done.
Leadership often focuses on broad resilience goals while the day-to-day work that supports them remains inconsistent and underfunded.
This is especially true when the day-to-day activities mainly consists clicking on links and other user-interface elements.
Yes, dark patterns are being used by adversaries, but a lot of day to day user experiences are based on dark patterns.
Improve those experiences by designing better processes amended by better automation, not the other way around.
Oh, and get your foundations right. For example by having processes in place that ease timely patching, even if that requires deployment on fridays.
--jeroen
The Wiert Corner - irregular stream of stuff 