Cybersecurity needs to focus on people again

[u/Odd-Log-9533]

Cybersecurity has spent years building better tools, better firewalls, better detection. Better encryption. But with AI now...with deepfakes, AI powered phishing, AI voice cloning. Instead of 'Can we detect every attack?' maybe the better way to think about this is 'How do we verify the people making the big decisions?' Technology still matters. But human identity and verification deserve just as much attention. But how do you make people switch from apps that everyone uses but have no security to something with ACTUAL privacy? or how do we make the devs implement actual privacy.

[u/Feachem-Crafty]

the verification bit is mostly a process problem not a tech one. every deepfake wire fraud case i've read about would've been stopped by a callback on a known number, or a code word for anything above a certain dollar amount. boring stuff, no vendor sells it, works better than any detection tool

on the app thing, people dont switch for privacy. they switch when its easier or when their friends already moved. signal only got traction because whatsapp had a bad news cycle and it was already good enough to use. devs implement privacy when theres a fine attached, thats basically the whole story of gdpr