Cyber Security project proposal

Ask AI? (i.e just copy that whole paragraph into the 'Google' search bar, and see what it's AI summary says)

1. Decide if this is a technical question, or a Human factors question, and why!  Remember https://xkcd.com/538/ (still applicable even if it is 'old' - 5 years - humans haven't evolved)

2. Ask why all the new stuff still doesn't work and simply swaps one problem for a potentially worse problem. E.g. passwords can be changed when compromised, but face ID?; providing finger prints for those with limb loss; Why the 'oldies' aren't accepting of passkeys - what do they know that tech nerds don't https://www.ncsc.gov.uk/passkeys. 

3. Why networking effects make security a harder problem (see current supply chain attacks with auto update mode.., natural birthday attacks, not enough verified prime numbers )

4. Layering: risk-reward layer tradeoff problems (getting locked out of all you banking because you can't verify on your broken phone / FIDO key).

5. legal ramifications and pressures (e.g. banks don't want to accept [financial] responsibility for compromised transactions without legal requirements)

6. retreat to Q1, which legacy technical area is most at risk ??

Ask AI? (i.e just copy that whole paragraph into the 'Google' search bar, and see what it's AI summary says)

1. Decide if this is a technical question, or a Human factors question, and why!  Remember https://xkcd.com/538/ (still applicable even if it is 'old' - 5 years - humans haven't evolved)

2. Ask why all the new stuff still doesn't work and simply swaps one problem for a potentially worse problem. E.g. passwords can be changed when compromised, but face ID?; providing finger prints for those with limb loss; Why the 'oldies' aren't accepting of passkeys - what do they know that tech nerds don't https://www.ncsc.gov.uk/passkeys. 

3. Why networking effects make security a harder problem (see current supply chain attacks with auto update mode.., natural birthday attacks, not enough verified prime numbers )

4. Layering: risk-reward layer tradeoff problems (getting locked out of all you banking because you can't verify on your broken phone / FIDO key).

5. legal ramifications and pressures (e.g. banks don't want to accept [financial] responsibility for compromised transactions without legal requirements)

6. retreat to Q1, which legacy technical area is most at risk ??

Decide if this is a technical question, or a Human factors question

or both? (to my mind having a hole in either surface is problematic)

Maybe have a look at some of the recent (and not so recent) compromises?

    - Andy.