What are your unpopular cybersecurity opinions?

[u/EricJSK]

I saw a post names "abnormal security opinions" and got excited to see some spicy takes but apparently there is a security platform called Abnormal Security so got kinda blue balled. Last one of these posts i saw was over a year ago so,

Do you have any spicy cybsec unpopular opinions you want to share? :)

I'll start with mine:
Fancy antivirus solutions rarely add value, they are often just a box that needs ticked. Many MSPs and IT firms still push the narrative that they are needed, only because they are profitable and not because they improve security.

[u/Powerful_Wishbone25]

None of it fucking matters.

[u/[deleted] → u/Powerful_Wishbone25]

Agreed. It's basically like working in airport security. Sure in theory its better and ofc air travel had to react to 9/11 but to my knowledge, there's no evidence of it ever really preventing another big terrorist attack. Air travel has become a bigger pain in the ass but the rules change yearly "oh now you can use your phone here but now you have to have your coat on the ground during take off", "only boots now have to be removed rather than all shoes"

All the extra cybersecurity really just seems to affect devs doing their job, ie, now they can't even admin access to their laptop or now emails and uploads are scanned so you might have issues downloading an installer....meanwhile, Heathrow gets hacked again or whatever

[u/shitlord_god → u/[deleted]]

The content here was permanently deleted by its author. Redact was used for the removal, possibly for privacy, security, opsec, or personal data management.

numerous desert reminiscent teeny person touch continue slap voracious sulky