Skip to main content

Why Do People Care Less About Cybersecurity?

Imagine trying to remember 10 to 50 passwords or access credentials just to get access to things you need to work done. People do not really care less about cybersecurity. The problem is that oftentimes security implementations makes the system less usable for people. That is one of the reasons why it seems that people care less about cybersecurity.

People don't really care less about cybersecurity, they are simply overwhelmed with the amount of decisions that they have to make to access their own data. People experience what is called 'decision fatigue'. It turns out, this is a known phenomenon in Psychology. This is exactly what people are experiencing and a research paper calls it 'security fatigue'

The paper is published here: https://www.computer.org/csdl/mags/it/2016/05/mit2016050026-abs.html and the National Institute of Standards in Technology (NIST) briefly wrote about the issue at https://www.nist.gov/news-events/news/2016/10/security-fatigue-can-cause-computer-users-feel-hopeless-and-act-recklessly.

The paper published last October 2016 only reinforces the idea that the addressing the mindset of people about security is at the forefront of ensuring a safer internet.

Comments

Popular Posts

What is HTTPS, Encryption, and Cipher?

By now you may have heard that a secure website starts with HTTPS and not just HTTP. And you have been making sure the site is secure when you access certain resources or post sensitive data. That is well and good but there seems to be a misconception that secure automatically means legitimate or authenticate site. It is not. Just because a website uses HTTPS doesn't automatically make it the authentic and legitimate site. So what is the difference? To understand the difference let us first make sure HTTPS is understood in its basic meaning.

Attack Example - ClickJacking+Spoofing - UI Redress - Trusted User Interface

ClickJacking and Spoofing Attack Example - Trusted User Interface attack. It used to be that the most common operating system and browser being targeted for this kind of attack is Windows and IE. The underlying reason was that Windows has more users and Internet Explorer was basically File Explorer having a different user interface. Today, the attack surface is wider and much more complicated to notice. The screenshot posted here is a combination of a User Interface (UI) spoofing from a ClickJack.