Saturday, 14 September 2024

Book Review: Bodies from the Library 5

Bodies from the Library is one of my most favorite series. Each new one is much awaited and instantly bought. 

The stories themselves are great, but the introduction to the author at the end of each story is really well written, and introduces us to some of the other work by the same author.. Which means if we like someone, we can read more of them. 

This compilation, however, does not meet the same high standards. 

Because every single story ever has been stellar, even a 'normal' crime story kind of appears to be falling short. 

Vacancy with corpse, though long, justifies the length. 

The Magnifying Glass by Cyril Hare and The Predestined by Q Patrick are the other stories that stand out. Both stand for natural justice. 

The year and the day by Edmund Crispin is a delightful, intriguing read. 

Murder in Montparnasse has to take the credit for being the most convoluted plot and somehow, magically, it still manages to bore the reader to death.

If you are a Bodies from the Library fan like me, do collect this one. its worth keeping in the library. But if you are just starting out on the genre of Golden Age of Crime Fiction, this is not the right book to start with. Start with Bodies from the Library 1, or the Strand magazine, which, I believe is now free to read somewhere on the internet. 

 

Wednesday, 11 September 2024

2 more book listings for The Small but Ultimate Book of Online Safety

Hatchards UK: 
https://www.hatchards.co.uk/book/the-small-but-ultimate-book-of-online-safety/nidhi-arora/9798893223002

Waterstones.com: 

https://www.waterstones.com/book/the-small-but-ultimate-book-of-online-safety/nidhi-arora/9798893223002







Behavioural Security

We readily acknowledge that humans are the weakest link in the security chain. 

BUT, people do not want to be conned. NO ONE ever said - Its ok to get conned. What's the issue?  

So, why are they the weakest link? 


I have been thinking about this very deeply. 

In one line, its simply that security has been projected as this esoteric discipline (rocket science) instead of making it a natural everyday thing to do. 

The second is that the approach to security in human behaviour has been directive - Do this, Don't do this, be Scared of this... 

This is never a good approach to take in behavior change. 


Presenting, a new discipline: Behavioural Security - the discpline that focuses on understanding human behaviour and creating models of change that lead to safer behaviour. Much like any other change management. 


Why do we need an entirely new discipline for this? For the simple reason that there is plenty of work to be done. 

I created one video to make it easy to create a complex password that is also easy to remember. And then it hit me - Why do we make it so hard for normal people? You are told to change  your password once a month, to make it Greek and Latin, but no one tells you HOW to do it! 

The education is largely directive, the verbiage fear-inducing rather than supportive. 

But the worst thing is the victim shaming. NO ONE wants to be duped. And yet, after every single episode, the victim is made to feel like a culprit. 


For far too long, companies and governments have focused on the tech side of cyber security - Bounty hunting programs, firewalls and AVs, zero day vulnerability assessments, VAPT... even the OWASP Guides and Top 10 are all tech. They do not focus on human centric security design. It is time to change that.  


So, let's get the work started! Let's research, create experimental models of change, verify those models, and end the era of humans being the weakest link in the chain. We are smart enough to deserve better. 


Sunday, 8 September 2024

On victimhood

It just occurred to me that our religions are basically determined by our mindset. We may be born into the same religion, but we will practice it according to our own thoughts and emotional needs. 

For some people, their religion is victimhood. Whatever their birth religion, they will convert it to victimhood. 

I call it a religion bcs religion is basically a way of life. It percolates into every thought, action, and belief. It guides us. For these people, that keyword is victimhood. It is all pervasive -  in their thought, belief, and action. 

These are the signs of a follower of this religion: 
A. It is never their fault. It is always someone else's fault. They may kill someone, but it will be the fault of the victim, the society, or the person who stared at them when they first started assaulting the victim. 

B. They don't need AR. Because they basically live their lives in AR - Alternate Reality and Augmented Reality. In that reality, their own contribution to the world is greatly augmented in their minds and the world's contribution to their lives is greatly altered. 

C. No gratitude - this is the most telling symptom. A perpetual victim feels no gratitude, only a deep sense of being owed. Everyone and everything owes them (Read B above). 

If you find such a person near you, first: 
A. Do not marry them. 
B. Do not hire them if they are expected to be a part of a team. 
C. Do not work with them in the same team. Ever. 
D. Be aware of the level of AR that you want to deal with, and keep the friendship accordingly. 

PS: This is meant to be a funny post rooted in reality. Please don't kill me for the use of the word religion. I have already explained the reason religion has been used.