I’m watching the livestream from home because I’m not feeling well, and don’t have a bed tonight.
Of course, a lot of the standard administrivia, but Bruce did hit on some of the sorts of things I’ve been thinking and writing about for a long time.
For the vast, vast, vast majority of organizations, Infosec is a parasitic function on another parasitic function.
McDonalds doesn’t exist to do Infosec; don’t treat the folks behind the counter like morons because they don’t do Infosec.
I sure as hell couldn’t make the pink goo be very edible; why would I presume the guy who can is an idiot because he has to write down his 95-character password?
It is a tool that lets people do what they’re hired to do more effectively. If it gets to the point where we’re keeping them from operating at all, why the hell are they paying us?
And the next talk is starting, so I’m gonna go.