Mastodon Feed
over the last few months it has been dawning on me that infosec as a field in general has done an extremely terrible job of communicating itself, even to highly technical users. my feed here has been full of highly skilled and experienced programmers expressing something between skepticism and outright hostility towards load-bearing security tools like codesigning, TLS, biometric auth, SSH host key verification, and passkeys, while promoting useless fidget spinners like GPG and VPNs