• 1 Post
  • 6 Comments
Joined 1 year ago
cake
Cake day: June 15th, 2023

help-circle






  • I think this is not how it works. It’s like saying: I’ll connect a physical lock to my laptop and I’m more secure. (Many PC laptops have on the side a standardized connector for physical locks which is often used in electronics stores)

    Better to go a step back and to consider your Threat Model. What are you doing? What are things that could likely happen right now? Is <insert security solution> adding to your security/backing up your Threat Model or is it making things worse because it’s adding stuff that you don’t need, making workflows so complicated you’re likely to misconfigure?

    To give a more practical example, there have been a lot of conspiracy theories about Antivirus software. In some sense the nay sayers are right and it actually adds possible holes since they tend to run with elevated privileges. On the other hand, does it really matter for your use case? If you download random stuff online, you should probably install one. (Probably also for your fellow humans so your computer doesn’t end up being a botnet host) But if everything on your computer is hand-picked ™, you might be actually right and they decrease security.