alt Hacker News> In security, friction is a GOOD thing.
Oh boy, it isn't. Friction leads to frustration and therefore more likelihood to ignore the importance altogether.
Replies
aleksskoz • today at 2:41 PM
It's about balance between security and getting things done. When I give an AI a task, I say: do this and this, but your boundaries are here and here. It should only do what it's allowed to. Even in simple cases, like running separate sessions on different tasks, they shouldn't be able to touch each other's work.
One more thing on balancing security and speed: I run regular audits and vulnerability checks, so I know the gaps are actually closed.
This is a great point. If something is overly complex and arduous often times people will find a way to go "under the table" and do something in a way that accomplishes the goal but undermines the process.
The classic example is password rotation. It used to be standard to force users to rotate their passwords every 30/90 days, but that led to users having a sticky note on their monitor with their password on it, so security authorities no longer recommend this practice.