Vacillating Between Morose and Morbund (or How I Feel Isn't Necessarily a Reflection of my Security Policy)

I saw an acquaintance today on Facebook post  a plea to her people that if they cared about privacy or security to reach out for help.

I sent her a message complimenting the tone used, and said how much of an uphill battle I feel like the process is even for higher risk folks.

I think the reality is much, much darker. Normal folks are experiencing the first real wave of profit driven attacks on their lives. I would say that journalists have had experiences with paid attackers going back almost as far as the written word. The security industry has begun to focus more on detection after a successful attack; more and more as evidence gathers that proactive prevention is unlikely to hold the door against what is a constant barrage of attacks from increasingly automated sources.

With the government (likely rightly) focused on infrastructure and enforcement, we are left looking to a tech industry that performs security theater like a teenager cast as Macbeth. 

"It is a tale
Told by an idiot, full of sound and fury,
Signifying nothing." (from Macbeth, spoken by Macbeth)

I do think there are bright spots, projects that make a difference, people that take the risks knowingly, stories that make a real difference and I think we are losing ground every day in the fight to keep mucksters mucking.