We’re Only Human
Andrew Martin · 2025
Abstract Human needs and behaviours are absolutely central to cyber security. Often designers of technology throw extra burdens onto users because this is cheaper than building better technology, or because of a failure to imagine how people will really use the systems. Usage policies sometimes add insult to injury in this regard, and are often put in place unthinkingly. Bad policies can actually work against security if they get in the way of people doing their jobs. Passwords, in particular, are simply a poor match for human skills; our brains are not suited to the perfect recall needed. Good security plans around the fact that people are fallible and make mistakes, and this includes those who design and build systems. Cyber space brings together diverse people, and this presents both an opportunity and a challenge.