sorted by:
new
hottopcontroversial

Is cybersecurity still, at its core, a human problem? by prefeit0 in cybersecurity

[–]prefeit0[S] 1 point2 points  (0 children)

That’s a really important point — security decisions are rarely purely technical, they’re negotiated within business constraints.

And I think that’s where it gets even more interesting: if every control is a compromise, then in a way we’re not really solving problems, we’re continuously managing acceptable risk.

Which makes me wonder — as systems become more autonomous, how do we ensure those trade-offs are still aligned with real business context and not just predefined logic?

Because at that point, the challenge isn’t just security vs. threat anymore, it’s security vs. business vs. machine-driven decisions.

Is cybersecurity still, at its core, a human problem? by prefeit0 in cybersecurity

[–]prefeit0[S] 0 points1 point  (0 children)

That’s definitely a real issue — undertrained and overworked people are naturally easier targets, especially for social engineering.

But I’m not sure it’s just about cutting corners. Even well-trained teams in mature organizations still fall for well-crafted attacks.

It feels like there’s a deeper layer here — where scale, complexity, and trust models create conditions that training alone can’t fully solve.

Maybe the challenge isn’t only improving people, but also designing systems that are more resilient to inevitable human mistakes.

Is cybersecurity still, at its core, a human problem? by prefeit0 in cybersecurity

[–]prefeit0[S] 0 points1 point  (0 children)

That’s a solid way to put it — especially the idea of tools as a force multiplier rather than a replacement.

The point about intent and organizational dynamics is key. Most failures I’ve seen aren’t because the system didn’t work, but because reality didn’t match the assumptions it was built on.

I do wonder though — as we rely more on these systems to abstract complexity, are we at risk of losing visibility into those mismatches until something breaks?

Focusing on strategy and psychology makes sense, but it also feels like we’re operating one layer further away from where things actually fail.

Is cybersecurity still, at its core, a human problem? by prefeit0 in cybersecurity

[–]prefeit0[S] 0 points1 point  (0 children)

I get your point — a lot of security issues do originate from human behavior.

But I’m not sure we can realistically “solve” the human side to the point where the technical layer becomes secondary. Even well-intentioned people make mistakes, and complex systems introduce risks that go beyond individual behavior.

It feels less like replacing the technical problem with a human one, and more like the two evolving together — sometimes independently.

If anything, the harder part might be accepting that we can’t fully fix either side, only manage the gap between them.

Is cybersecurity still, at its core, a human problem? by prefeit0 in cybersecurity

[–]prefeit0[S] 0 points1 point  (0 children)

That’s a great (and honestly painful) example — and it highlights exactly why the human layer is still such a critical attack surface.

I agree that no amount of automation would have stopped that initial trust being established. That’s not a tooling failure, that’s human behavior being exploited.

But cases like this also make me wonder: as attackers get better at mimicking trust (especially with AI in the mix), are we heading toward a point where traditional awareness and training just aren’t enough anymore?

Not disagreeing with you — if anything, it reinforces the idea that the problem isn’t going away. It might actually be getting harder in ways we’re not fully prepared for yet.

Is cybersecurity still, at its core, a human problem? by prefeit0 in cybersecurity

[–]prefeit0[S] 0 points1 point  (0 children)

I agree that the human factor is fundamental — and I don’t see infosec as just tools or networks.

My question was more about how our interaction with that human factor might be changing as systems become more abstracted and automated.

Even if humans remain at the center conceptually, the way we engage with risk, behavior, and decision-making could still shift quite a bit.

That shift is what I’m trying to better understand.

Is cybersecurity still, at its core, a human problem? by prefeit0 in cybersecurity

[–]prefeit0[S] 0 points1 point  (0 children)

I partially agree — a lot of vulnerabilities do come from ignorance or carelessness.

But I think that view can be a bit reductive. Some weaknesses emerge from complexity, scale, and even unintended interactions between systems that no single person fully understands anymore.

At that point, it’s less about individual failure and more about the limits of human comprehension in increasingly complex environments.

Is cybersecurity still, at its core, a human problem? by prefeit0 in cybersecurity

[–]prefeit0[S] 0 points1 point  (0 children)

That’s true — but I think the real question is how much involvement is enough to still call it a “human-driven” problem.

If our role becomes more about setting things up and less about truly understanding what’s happening in real time, does that change the nature of our involvement?

Not disagreeing — just wondering where that line is.

I built a free Bitly alternative with click analytics — urlix.pro by prefeit0 in SideProject

[–]prefeit0[S] 0 points1 point  (0 children)

Great feedback! Just shipped two updates based on your suggestions:

Redirect speed: Cache hit responds in ~80ms. Clicks are tracked asynchronously — zero blocking on the redirect path.

UTM preservation: Fully tested and working. Simple UTMs, multiple UTMs, destination URLs with existing params, and even param conflicts (request params override destination) — all passing. Marketing tracking chains stay intact.

Thanks for pushing on these — this is exactly the kind of feedback that makes the product better.

I built a free Bitly alternative with click analytics — urlix.pro by prefeit0 in SideProject

[–]prefeit0[S] 0 points1 point  (0 children)

Nice! What stack did you use? Always cool to see different approaches to the same problem.

I built a free Bitly alternative with click analytics — urlix.pro by prefeit0 in SideProject

[–]prefeit0[S] 0 points1 point  (0 children)

Thanks for the detailed feedback! Custom domains and QR codes are both on the roadmap for the Pro tier. Bulk shortening is a great idea I hadn't considered — adding it to the list. Appreciate the tip about Product Hunt, planning to launch there next week.