Practices around identity and managing credentials have improved greatly since the days of infosec mandating 90-day password rotations. But those improvements didn't arise from a narrow security view. Hannah Sutor talks about the importance of balancing security with usability, the importance of engaging with users when determining defaults, and setting an example for transparency in security disclosures.

Segment resources

https://youtu.be/ydg95R2QKwM

Curl's oldest bug yet, RCPs (and more!) from AWS re:Invent, possible controls for NPM's malware proliferation, insights and next steps on protecting top 500 packages from the Census III report, the flawed design choice that made Microsoft's OTP (successfully) brute-forceable, and more!

Visit https://www.securityweekly.com/asw for all the latest episodes!

Show Notes: https://securityweekly.com/asw-311

Applying Usability and Transparency to Security - Hannah Sutor - ASW #311 01:09:42 Share

Security Weekly Podcast Network (Audio)

Shownotes Transcript

Applying Usability and Transparency to Security - Hannah Sutor - ASW #311