Skip to content
← all posts
Hot Takes

We think like that because we're like that

People in security greatly overestimate the ability and the propensity for people to think like bad guys in the way that we do. We think like that because we're like that. What we can forget is that not everyone is. In fact, most people probably aren't.

"Why don't they just fix this stuff? Don't they realize it's important?" Usually it's because we haven't done a good enough job of actually explaining it to them yet.

From my conversation with Fede Kirschbaum on XBOW's Offense Taken.

Casey Ellis
Casey Ellis
Hacker, founder, advisor, and pioneer of crowdsourced security. Founder of Bugcrowd, co-founder of disclose.io, principal of Tall Poppy Group. Board member at SRLDF.
bio →

Comments ·

members only