It's October! And that means it's
CYBERSECURITY AWARENESS MONTH
🕵️#BeCyberSmart
A #CyberAware Poem
Hard to believe it is the 17th time
October is chosen to address risk of cyber crime
Despite all the tech thrown at securing us online
We are as insecure as ever
Tech can't solve human problems, without in some part leveraging human solutions. Changes to how we use passwords, has exacerbated issues associated with human tendencies and rather than solve problems, they created new and more complex problems.
vibby.com/watch?vib=71gP…
Complexity breeds vulnerabilities as systems become more difficult to understand and patch together. This is where criminals thrive. And where companies struggle to manage the risk and the cost of identifying when these vulnerabilities are exposed and result in a #databreach
New solutions must leverage the strength of human tendencies, rather than let them be stripped away and left to one device or another, creating new and more complex attack vectors that continue to make people vulnerable online.
Back when we had only one or two logins, a simple unique password was quite effective. Now, the average person has dozen's of online identities and many passwords. It's too hard!
We need to #FortifyPasswords but up to now that's been too difficult - people prefer convenience.
So what do we all do? We ask Chrome or Edge to "Remember me" and enable me to "Sign in less frequently" or "Keep me signed in" - all in the name of overcoming the complexity that has been forced upon us and to help make our lives easier and more convenient once again #UX #CX
That's great! Easy! Excellent!
Except now, if someone gains access to your computer, They breeze right through the authentication that was meant to protect you. 😳
Because your browser remembers your password, if anyone has access to your computer, they can log right in to:
Your Amazon Account
Your Bank Account
Your Credit Card Account
Your PayPal Account
All without ever having to enter a password or authenticate again 😱
And if your Windows login controls access to a corporate domain, they likely have access to all sorts of company secrets and they can:
Access files
Access e-mail
Setup e-mail forwarding rules
Phish & Hunt in the corporate network even further ☠️
You may be thinking... well, that's 2020 for ya! And who wouldn't?
But it doesn't have to be this way.
Imagine: A password that only works when YOU use it
No Codes
No Devices
No Tokens
No Hassle
And you have TickStream for Windows
intensityanalytics.com/winlogon
#BeCyberSmart
Share this Scrolly Tale with your friends.
A Scrolly Tale is a new way to read Twitter threads with a more visually immersive experience.
Discover more beautiful Scrolly Tales like this.