The Effectiveness of Publicly Shaming Bad Security:
If a company is going to take a position on security either in the way they choose to build their services or by what their representatives state on the public record, they can damn well be held accountable for it:
I'm *absolutely* fed up of social media managers/comms teams taking control and making erroneous statements. If they have the balls to say something that's demonstrably false and won't back down when shown proof, be it on their head.
- Scott McGready (@ScottMcGready)
Whether those rejecting shaming of the likes I've shared above agree with the practice or not, they can't argue with the outcome. I'm sure there'll be those that apply motherhood statements such as "the end doesn't justify the means", but that would imply that the means is detrimental in some way which it simply isn't. Keep it polite, use shaming constructively to leverage social pressure and we're all better off for it.
(Via Troy Hunt's Blog)
A long read. Troy captures several examples supporting his thesis. Sadly, he's right. My concern is that, as society becomes immured to security issues, this tactic will work less and less frequently.
Also on: