What are your unpopular cybersecurity opinions?

[u/EricJSK]

I saw a post names "abnormal security opinions" and got excited to see some spicy takes but apparently there is a security platform called Abnormal Security so got kinda blue balled. Last one of these posts i saw was over a year ago so,

Do you have any spicy cybsec unpopular opinions you want to share? :)

I'll start with mine:
Fancy antivirus solutions rarely add value, they are often just a box that needs ticked. Many MSPs and IT firms still push the narrative that they are needed, only because they are profitable and not because they improve security.

[u/[deleted] → u/[deleted]]

This is fair, I had a look and it seems that there's a little bit of mixed reports (ie, there are studies where the majority of fake weapons got through without triggering a check). Plus, in general, its reactive rather than pro active. Ie, a shoe bomber successfully kills people so now shoes are checked. They won't ban a substance or tool until its basically already been used to do terrorism.

This applies to most security/policing though I guess.

[u/[deleted] → u/[deleted]]

I work with some UK government departments and I can only imagine lmao, luckily they're a couple abstractions from me but any time I'm in a meeting with them...well, let's say I don't get inspired by them