<oembed><type>rich</type><version>1.0</version><title>tnperron wrote</title><author_name>tnperron (npub1kw…zusa4)</author_name><author_url>https://yabu.me/npub1kw893e70hve5ymc8kxr75d8m9wcuaaasqzn37xvea6l4f39q04fs7zusa4</author_url><provider_name>njump</provider_name><provider_url>https://yabu.me</provider_url><html>In a choice between security and convenience, convenience will win every time.&#xA;- some rando on the internet&#xA;&#xA;When trying to pitch some users on not leaving their passwords on a sticky note on their monitors, I was going to use the example of &#34;you wouldn&#39;t tape your house keys to your front door&#34;.  But before the words could leave my mouth I remembered a past house-call customer who did exactly that.&#xA;&#xA;The moral of the story is when planning for security, you either need to make the cost of shortcutting enormous and immediate (think firing w/perp-walk out the door) or more convenient than shortcutting.  The first is obviously unpopular with most, and the second is a huge PITA for devs who will also choose convenience by offloading to MFA-in-a-box and shouting &#34;let them eat TOTP apps and choose traffic lights!&#34;.&#xA;&#xA;Damn, this started as a funny story about security and ended in mild depression... 😭</html></oembed>