Post #4042143
2026-07-23 16:55 UTC
Replies (3)
-
@subm3rge@infosec.exchange 2026-07-23 17:33
@julie@merida.hair ... as long as that also includes the tools to stop them from making eachother very sad, as well. My userset is normally very heterogenic, holding aggressively competing teams and groups, and unless I can physically/galvanically stop them from abusing [other teams] privs, tokens, hard-/software they most certainly will, and damn the consequences. Users want to succeed. They do not see avoiding disaster as a key to that, only avoiding accountability.
-
@xdydx@mastodon.social 2026-07-23 21:43
@julie@merida.hair The 1st rule of security is to protect the person. Everything builds from that.
-
@Stormgren@obsidianmoon.com 2026-07-23 17:00
@julie@merida.hair SO MUCH THIS. I've been saying for years that if you can't relate, empathize or make life easier for your users, the best security plans will completely fall apart because those plans will be resoundingly ignored or worked around.