BC CYBER SECURITY
Saved by @jacobhtml

2 different frames or metaphors for #CyberSecurity

Security as a Quality Management issue thus a problem of robustness

Security as a Safety issue thus a problem of resilience

They’re fundamentally different, may even be at odds but how ?

🧵

 A Quality Management metaphor leads us down elements of testing, predictability and reliability in that we aim to be effective at dealing with predicted threats which represent a finite configuration of what our industries expect. We aim for “maintaining process integrity inside
Of known design, training and procedural parameters” (Dekker) so I prepare for a number of scenarios, ways I can foresee and threat model for and (not just operationally, but also reqs gathering, testing, training,sdlc and even threat intel) increasing the robustness of my system
All well and good, but from Complexity science we know that “robust constraints tend to fail catastrophically when design conditions are exceeded” @snowded
But this is also a cautionary tale. If you don’t have the capacity to deal with expected adverse conditions,
You have no business thinking or prioritising adaptive capacity because the “knows” can get you down and keep you there.
So until you get to the point where your robustness is sound, this is the metaphor that is most appropriate and which can be argued for economically
If and when the robustness of your system is high, meaning you have appropriate mitigations in place to the outcomes of the threat models you build for your apps and platform, then your risk profile starts to change.
The very measure you’ve put in place, which got you this far to achieve a “secure system” by industry and accepted standards, may now be exact things which will contribute to its downfall because “in safe systems the very processes that normally guarantee safety and generate
Org success can also be responsible for org demise” (Dekker) This means that the challenges you’re now likely to faced relate to the relationships & interconnections of your sociotechnical system (scarcity competition, patterns of info to decision makers, incrementalist nature
Of decisions taken over time which can cause drifts into failure, drifts into setting conditions for data breaches.
When you get here, a metaphor of Security as Safety is likely more appropriate. You’ve now dealt with the robustness of components and put in the measures which are
Expected to make you withstand the scenarios you can envision on your threat model. So now a focus on resilience becomes beneficial as you’re building systems which “are effective at meeting threats that represent infinite reconfigurations of - or ones that may lie entirely
Beyond - what the industry could anticipate” and which are “capable of maintaining process integrity well outside the design base or outside training or procedural provisions”

You’re now building for resilience and sustained adaptive capacity

“But can I do both?” You ask
The building of robustness benefits from processes of analysis (breaking things out to smaller parts and secure them to build them back up) while resilience benefits from processes of synthesis (role on the wider system and function within it)
So while you perform both types of assessments, a focus on resilience where there’s limited robustness is of little value. A small punch can knock you down and keep you there. So I would advocate building robustness first as the focus of transition/transformation, potentially
Being attentive to affordances and constraints to identify opportunities for improvement.

Remember that sources of resilience in orgs are in our people. They’re the ones dealing with the variability our systems and automation can’t handle, so applying principles of learning
From incidents, and understanding what our teams were surprised by, and namely any “fundamental surprises” (where their models the system were or what’s possible were challenged or took apart) are learning opportunities that should never go to waste
@threadreaderapp unroll

You May Also Like

antifa.drone
antifa.drone
@antifa_drone
Fake chats claiming to be from the Irish African community are being disseminated by the far right in order to suggest that violence is imminent from #BLM supporters. This is straight out of the QAnon and Proud Boys playbook. Spread the word. Protest safely. #georgenkencho


There is co-ordination across the far right in Ireland now to stir both left and right in the hopes of creating a race war. Think critically! Fascists see the tragic killing of #georgenkencho, the grief of his community and pending investigation as a flashpoint for action.


Across Telegram, Twitter and Facebook disinformation is being peddled on the back of these tragic events. From false photographs to the tactics ofwhite supremacy, the far right is clumsily trying to drive hate against minority groups and figureheads.


Declan Ganley’s Burkean group and the incel wing of National Party (Gearóid Murphy, Mick O’Keeffe & Co.) as well as all the usuals are concerted in their efforts to demonstrate their white supremacist cred. The quiet parts are today being said out loud.


The best thing you can do is challenge disinformation and report posts where engagement isn’t appropriate. Many of these are blatantly racist posts designed to drive recruitment to NP and other Nationalist groups. By all means protest but stay safe.
TRADING
Guillaume Chaslot
Guillaume Chaslot
@gchaslot
The YouTube algorithm that I helped build in 2011 still recommends the flat earth theory by the *hundreds of millions*. This investigation by @RawStory shows some of the real-life consequences of this badly designed AI.


This spring at SxSW, @SusanWojcicki promised "Wikipedia snippets" on debated videos. But they didn't put them on flat earth videos, and instead @YouTube is promoting merchandising such as "NASA lies - Never Trust a Snake". 2/


A few example of flat earth videos that were promoted by YouTube #today:
https://t.co/TumQiX2tlj 3/

https://t.co/uAORIJ5BYX 4/

https://t.co/yOGZ0pLfHG 5/
TECH , FLAT EARTH
Advertisement
Yoruba History - by NNP
Yoruba History - by NN...
@YorubaHistory
The Ife Primary Education Research Project (1970-1983).

aka

The Ife 6-Year Primary Project.


In 1970, as the Director of the Institute of Education of the then University of Ife (now Obafemi Awolowo University, Ile-Ife), later Dean Faculty of Education, Prof. Babs Fafunwa & his team embarked on one of the most groundbreaking research projects in education for Yorubaland.


The aim of the project was to test the hypothesis that the best instructional medium for good concept formation at a very tender age is the mother tongue.

This was bolstered by the observation that “of all the continents and peoples of the world, it is only in Africa…

…that formal education is offered in a language that is foreign to the child.”

So, Yoruba was to be used & tested as an exclusive medium of passing information or instructions to a set of pupils.

The project was based on the premise that:

(a). the child will benefit culturally, socially, linguistically & cognitively.

(b). the child’s command of English will be improved if he is taught English as an entirely separate subject by a specialist teacher through the 6 years.
ALL
Tej Dosa \U0001f602\U0001f9e0
Tej Dosa 😂🧠...
@ComedicBizman
(A THREAD)

18 Things I Would Do At 18:

I was a dumb 18-year-old. I thought I had the world figured out. I didn't.

I stayed up till the wee hours. Drank every liquor invented.

Partied non-stop. Woke up after noon.

Surfed the web aimlessly.

Read BS self-help.

Repeat.

If I could do it all over again, here's 18 things I would do...

PHASE ONE: GET MY MIND RIGHT

ACTION #1: Break the chains - I wish I made the decision earlier. I didn't. I was scared. Anxious. Nervous. I knew once I made the decision, there was no going back.

Don't be like me.

Make the decision at 18. The decision to pave your own path in life. To go against the herd. To choose your own adventure. To commit to whatever sets your heart on fire.

ACTION #2: Cut off every negative person in your life.

Scroll through the contacts in your phone...

Notice how the names make you feel.

Delete any and all names that fill you with doubt and negativity.

ACTION #3: Condition your mind to embrace the producer mindset instead of the consumer mindset.

Consume 20% of the time. Produce 80% of the time.

Case closed.

ACTION #4: Set an intention to make $10k a month and write it out every MORNING and NIGHT as if you already achieved it (in the past tense).

Visualize yourself already having the money as you write.

Cheesy?

Yes.

Does it work?

Yes.

PHASE TWO: EDUCATION
LIFE
Erik Torenberg
Erik Torenberg
@eriktorenberg
1/ Some initial thoughts on personal moats:

Like company moats, your personal moat should be a competitive advantage that is not only durable—it should also compound over time.

Characteristics of a personal moat below:


2/ Like a company moat, you want to build career capital while you sleep.

As Andrew Chen noted:


3/ You don’t want to build a competitive advantage that is fleeting or that will get commoditized

Things that might get commoditized over time (some longer than


4/ Before the arrival of recorded music, what used to be scarce was the actual music itself — required an in-person artist.

After recorded music, the music itself became abundant and what became scarce was curation, distribution, and self space.

5/ Similarly, in careers, what used to be (more) scarce were things like ideas, money, and exclusive relationships.

In the internet economy, what has become scarce are things like specific knowledge, rare & valuable skills, and great reputations.
LIFE