horeszko

Perhaps part of the problem is that an active shooter is easy to visualize and understand whereas unsecured credentials stored in cookies are an abstract and difficult to visualize problem for management.

Furthermore, turnstiles are easy to promote and take credit for. Secure web authentication would have to be explained to and understood by the boss's boss before credit for it could be claimed.

I suspect it's these aspects of organizational reality that results in security theater.

Hi HN community,

Is anyone looking for a volunteer for IT or programming?

I linked my LinkedIn profile if anyone wants to take a look.

I am located in Toronto. I'm good at programming and configuring servers, and basic networking configuration.

Feel free to reach out on LinkedIn or here via Hacker News (see my profile for my contact email).

Also, if anyone knows were I can get in touch with people or organizations looking for volunteers please let me know in the comments or via LinkedIn or email.

Thanks,

Chris

My networking instructor still suggests this today when configuring the login for routers and switches

> Kiberphant0m denied being in the U.S. Army or ever being in South Korea, and said all of that was a lengthy ruse designed to create a fictitious persona. “Epic opsec troll,” they claimed.

This is called a "double cover story", a classic deflection when someone is caught or exposed.

I wonder if the mud crabs around the Imperial City in Elder Scrolls Oblivion where based on this?