Security

I Don't Belive Your 2FA

May 16, 2026 · 1 min read · Security

Two factor? Which two factors? Something you have, something you know, and something... No, not in theory - in reality. Which two factors? You need a PIN from the phone to access resources, such as email. Do you have email on your phone? Because that's one 'factor': your phone. Once someone controls your phone, they …

The Backup Paradigm

Mar 3, 2025 · 1 min read · Security

Over the years, I've become convinced, that 'backups' are a bad paradigm, and should be left to edge-cases. We should instead focus on 'synchronization' where possible. Where backups say 'make a copy, on tape, place it in the basement, and lock it tight', they immediately have to follow this statement with '...and …

Building a Meme in Under a Month

Apr 20, 2023 · 10 min read · Security Politics

People have parroted that old cyber-security phrase - 'depends on the threat model' - so often, so quickly, and so vacuously, that I find my toes curling at the sound of it. But after some dealing with some imbeciles on Reddit's /r/privacy, I have to write this article about the importance of the threat model. It …

Explaining Security with Metaphors

Oct 24, 2022 · 1 min read · Prattle Security

I wonder if people might struggle less with computer security if we employed metaphors for previous technology. People have attempted to get videos off the internet, showing a clear misunderstanding of how computers work. If they thought in terms of many people photocopying a picture, I'm sure they would understand how …

Android Security is Mad

Dec 2, 2021 · 2 min read · Security Linux

The basic idea seems to be that if the user wants to install random, unaudited software, they can safely do so without worry that the application will steal their contacts, record their voice, or otherwise engage in bad behaviour. What keeps the user safe is the ability to allow or deny an app access to these various …