One of the security tenants that I live by is Kerckhoffs's principle.

A cryptosystem should be secure even if everything about the system, except the key, is public knowledge.

-- Auguste Kerckhoffs, 1883

It's beautiful in it's simplicity and yet counter intuitive.

It's a beguiling myth that if you want to …

There is a quote that's been floating around Security Stack Exchange for a while that I like, it's called AviD's Rule of Usability:

"Security at the expense of usability, comes at the expense of security."

I think it's brilliant. I've see it several times where security has made things too …

Estimating the security of software is something that most systems administrators do instinctively, whether consciously or subconsciously. I have heard people say things like "Don't use WordPress it's always getting hacked", "Linux is more secure than Windows"¹ or "Macs don't get viruses"². All of these are estimates about …