Bonum Certa Men Certa

Citation/Atlas 'Security' Exam is a Total Farce, But It's Still Good for Entertainment Purposes

Summary: What are people being taught about so-called 'security'? Might that explain so many security breaches? (Poor training, wrong assumptions)

OVER the years I saw criticisms of school or classroom indoctrination about copyrights. They're basically teaching/pushing a bunch of lies to young children in an effort to "educate" them about "copyright law" (sounds reasonable on the surface... until one actually checks what these pupils are being told).



"It's supposed to sound sophisticated, but the net gain for security is laughable."For ISO compliance purposes, sometimes I'm required to take and pass some online "training" courses. Some of these are ridiculously bad, so I end up taking screenshots.

This post is about fake security mindset -- a concept explained here several times earlier this year. It's supposed to sound sophisticated, but the net gain for security is laughable. Complexity does not beget security (usually the opposite is true; simplicity is auditable). Basically, it boils down to what's sometimes known as "security theatre", owing to a 'fake security' cargo cult of "phones" or "apps" and "clown computing" (i.e. giving all your access credentials to some other company, along with highly sensitive data).

During my latest "training" I stumbled upon about 40 examples of amusing errors and silliness (it's all over the place, sometimes with repetition for extra effect or 'good' measure), but to keep things more concise and digestable I took screenshots and annotated them a little, just as I did last year with edX [1, 2], in effect shilling for the Linux Foundation in the guise of "training". Where does one draw the line between courses and marketing, revisionism, and even outright lies?

"Basically, it boils down to what's sometimes known as "security theatre", owing to a 'fake security' cargo cult of "phones" or "apps" and "clown computing" (i.e. giving all your access credentials to some other company, along with highly sensitive data)."Below I present just a small sample. Almost at random I narrowed it down to just a dozen rather unique examples (there are many more similar instances of these). Surely, a more exhaustive list would take a lot of time to prepare while the clock is running. At the end, one is required to lie or say what they expect you to say in order to pass the test (which I did). To be fair, the questions aren't as terrible as the supposed 'training', as they don't mention brand names there or promote outrageous fallacies.

Without further ado, let's begin.

Does that mean what they think it means? Yes! They can! Like, every person? If you already labeled them that, what does that mean? 'Good' ones?

It doesn't take a genius to see what's happening here and why it's shallow. Infantile questions like, ARE CRIMINALS A THREAT? It's like a colouring book quiz with heroes and villains. They present actual adults with such questions. We'll come back to it later when it comes to "exam time".

They don't need to target you, they can target the software you use, e.g. Microsoft Windows

Notice how, just like Microsoft, they're looking to blame computer users or "criminals" (or some nations like China or Russia). Anything to divert liability away from rogue software companies that write shoddy code, hide the defects, and code back doors for the NSA et al.

Let's move on.

Apple or Microsoft

Wait, I'm confused.

You mean Microsoft

As if it's the user's fault that Microsoft cannot secure its own systems...

Surveillance devices with back doors are some of the least secure ways to maintain access to things

Yes, let's all use 'phones' to manage critical servers... with "apps".

Back doors of vendors and governments not even mentioned

Missing part?

With back-doored encryption of the aforementioned brands?

No mention of "weakened" (i.e. fake) encryption.

Microsoft promotion (niche player)

Why are they ignoring bigger players like Facebook and Twitter? Brand promoting? Wait, there's more right after that...

What if I don't use (back-doored) Windows?

It's 2021 and they still think everyone uses Windows. Guess what... Windows market share is less than a third.

But should I use Windows at all?

Windows again.

OK, questions time. First in the test:

The simplistic children's villain narrative

So let me guess... "criminals" are the threat. Who would have guessed?

Did I learn something from this course? Absolutely nothing. But I got some giggles. Many millions of people are constantly subjected to this kind of propaganda, which sometimes seems more like marketing than actual education.

Recent Techrights' Posts

Human Rights Tribunal of Ontario (HRTO) Does Not Wish to Become an Instrument of Cost-Free Harassment or 'Cheap Revenge', It Says "Justice is Not Free. Quite the Contrary. Justice is Expensive."
Long story short, there is no lawsuit, there is a just a hateful, lying idiot abusing "the system" (which this idiot rejects entirely)
 
Gemini Links 15/04/2024: Profectus Alpha 0.4 and RPG of One Capsule Progress
Links for the day
Over at Tux Machines...
GNU/Linux news for the past day
IRC Proceedings: Sunday, April 14, 2024
IRC logs for Sunday, April 14, 2024
Oceania: GNU/Linux Measured at Lower Than the International Average (4% or 7% Including ChromeOS)
statCounter's data
Achieving Objectives
The 'suits' and their vocabulary can be overcome when their deceit is widely deciphered:
Mozilla Has Turned Firefox Into OSPS Consistent With "Attestation" Objectives
Open Source Proprietary Software
100 years of Hitler & psychological experiments on volunteers
Reprinted with permission from the Free Software Fellowship
Taliban, the Free and Open Source Software Community Team of Afghanistan
Reprinted with permission from the Free Software Fellowship
Links 14/04/2024: Software Needed for Work and Issues in Brazil
Links for the day
Gemini Links 14/04/2024: OFFLFIRSOCH and Gemtext Specification 0.24.0
Links for the day
Links 14/04/2024: Tesla and OpenAI (Microsoft) Layoffs Floated in the Media
Links for the day
Over at Tux Machines...
GNU/Linux news for the past day
IRC Proceedings: Saturday, April 13, 2024
IRC logs for Saturday, April 13, 2024
Gemini Links 13/04/2024: SEO Spam and ‘Broadband Nutrition Label’
Links for the day
Gemini Links 13/04/2024: GmCapsule 0.7 Released
Links for the day
Links 13/04/2024: Whistleblowers, OpenAI and Microsoft Leakers
Links for the day
'Our' Technology Inside the Home is Becoming Less Reliable and It Implements the Vision of Orwell's '1984' (Microphones and Cameras Inside Almost Every Room)
Technology controlled by who exactly?
Over at Tux Machines...
GNU/Linux news for the past day
IRC Proceedings: Friday, April 12, 2024
IRC logs for Friday, April 12, 2024
Google, FSFE & Child labor
Reprinted with permission from the Free Software Fellowship
Links 13/04/2024: Huawei and Loongson PCs, IBM Layoffs
Links for the day
Gemini Links 13/04/2024: Specification Changes and Metaverse Newbie
Links for the day