Security quotes of the week

>(...) some of our advice could be compared to telling someone they should only trust food that has been delivered to them by a zebra.

But this is literally true. Many "security people" argue things from a black-and-white perspective, where either there's absolute security or there's none at all; and this leads them to suggest an implicit threat model where a supposed poison might be proximity-lethal to any zebra but require ingestion to kill a human. All with a straight face, expensive marketing materials, and the full rehearsed gravitas of a Serious Professional.

Ever notice how "security people" tend to have eccentric solutions to their personal infosec? Such as running every application in a dedicated, transient VM, and nothing on the host. Yet no two of them agree what the threat model is which they're responding to: presumably all of them are chased by the all the world's TLAs at the same time, electronic preppers hugging air-gaps in their respective e-bunkers. That's for those who'll describe their solutions in the first place -- security by obscurity being a cherry on top, just in case, can't hurt you know.