Hacker News new | ask | show | jobs
by mumblemumble 2136 days ago
My guess is that this works just like how it does in corporate security: It is vastly easier to add a new security policy than it is to remove it. Even when everyone knows something is useless or perhaps even harmful, nobody wants to be in a position to be held culpable on the off chance that retiring the policy is implicated in a future breach.
1 comments

Polygraphs are a $2 billion industry, and Upton Sinclair said it best: "It is difficult to get a man to understand something, when his salary depends on his not understanding it."
Sure, but what about the people buying polygraphs?
Their jobs depend on the polygraph existing as a credible institution