norb reviewed Fancy Bear Goes Phishing by Scott J. Shapiro
Insightful Book That Helps Put the Humanity into Cybersecurity
4 stars
Cybersecurity is my job, so I came into this book with some amount of knowledge of the subject, but I still found it a fascinating read.
At first, I was slightly annoyed that Shapiro was making up new words (downcode, upcode, metacode) to describe things we already have word for in the industry, but as I read the book I started to see why he's using these words.
Shapiro does a great job of using the ideas of downcode (what you might consider regular computer code), upcode (generally the ethics or rules that the computer user has), and metacode (the rules that exist "above" the user, such as laws). By defining these three ideas, Shapiro makes the case that cybersecurity is not a technology problem at all, but rather a human problem.
This idea is something that I've tried to instill in others at my day job, but it is …
Cybersecurity is my job, so I came into this book with some amount of knowledge of the subject, but I still found it a fascinating read.
At first, I was slightly annoyed that Shapiro was making up new words (downcode, upcode, metacode) to describe things we already have word for in the industry, but as I read the book I started to see why he's using these words.
Shapiro does a great job of using the ideas of downcode (what you might consider regular computer code), upcode (generally the ethics or rules that the computer user has), and metacode (the rules that exist "above" the user, such as laws). By defining these three ideas, Shapiro makes the case that cybersecurity is not a technology problem at all, but rather a human problem.
This idea is something that I've tried to instill in others at my day job, but it is something that is hard for people to understand, even those that work in the IT/cybersecurity industry. Many technical people think you can solve all problems via technical means. This is what Shaprio calls "solutionism" near the end of this book (if I remember correctly, the word "solutionism" is actually coined by someone else).
I found myself comparing this book to another one I read recently, A City on Mars by Zach and Kelly Weinersmith. Both of these books take what is ostensibly a "technical problem" and then start to apply the human element to it, with the end result being about the same. Technology cannot and will not solve all of our problems. We really have to do it in the messy human world.