In this narrative medicine essay, a family physician shares the beginning and ending of a near 12-year journey with a patient, helping him reach sobriety that led to a full though short life and feeling humbled to have been so entrusted to travel with him.

Though Rashami Desai and Siddharth Shukla don't share a friendly rapport, they do set the screen on fire with their sizzling chemistry.

Hosting our own hackathon was a chance to contribute to the COVID-19 response, and an opportunity to build new relationships with staff we don’t typically work with, promote the ideas of others, and encourage staff to leverage their creativity to think about problems.

Hayden Library - PN1995.9.H55 P69 2019

Through the Parents and Children Together evaluation, Mathematica researchers are contributing to the evidence base regarding approaches to increase positive father involvement in children’s lives. At a forum on December 7, researchers, program administrators, and program participants shared their experiences and what they learned.

Mathematica brought together leaders from a variety of sectors to discuss the challenges of becoming data driven and offer action-oriented, accessible advice on how organizations can take their first steps, or their next steps, to progress together.

As we step into the new year, Mathematica is proud to announce new partnerships with the U.S. Department of Education. On these projects, we will work together to evaluate education programs and produce insights that strengthen teaching and learning.

University of Sydney. Post-Graduate Committee in Veterinary Science

Stout, Linda

"Bengal becomes ideal for trafficking as it shares border with Bangladesh and Nepal," said Mudar Pathera, one of the event initiators.

Check out WIRED's music issue featuring Ahmir 'Questlove' Thompson at: http://www.wired.com/listen Music: THEESatisfaction "Existinct"

Produced for Atlassian by the WIRED Brand Lab. The process of team work is all around us. From construction, to music, to food, the greatest achievements are born out of teams. On its surface, collaboration is a seemingly simple process, but there is much more underneath. WIRED teams up with the experts and uses science to showcase the mechanics behind working as a team.

Hayden Library - PQ2603.O533 A262 2017

Our commitment to diversity, equity, and inclusion in all that we do means thinking critically about what diversity means and taking important steps to create a Mathematica where everyone feels welcome and can cultivate a meaningful career.

Futsal Anthem, biopics, and much more in this candid chat with Rahman.

Online Resource

Divya Sasidharan calls into question the trade-offs often made between security and usability. Does a secure interface by necessity need to be hard to use? Or is it the choice we make based on years of habit? Snow has fallen, snow on snow.

Security is often synonymous with poor usability. We assume that in order for something to be secure, it needs to by default appear impenetrable to disincentivize potential bad actors. While this premise is true in many instances like in the security of a bank, it relies on a fundamental assumption: that there is no room for choice.

With the option to choose, a user almost inevitably picks a more usable system or adapts how they interact with it regardless of how insecure it may be. In the context of the web, passwords are a prime example of such behavior. Though passwords were implemented as a way to drastically reduce the risk of attack, they proved to be marginally effective. In the name of convenience, complex, more secure passwords were shirked in favor of easy to remember ones, and passwords were liberally reused across accounts. This example clearly illustrates that usability and security are not mutually exclusive. Rather, security depends on usability, and it is imperative to get user buy-in in order to properly secure our applications.

Security and Usability; a tale of broken trust

At its core, security is about fostering trust. In addition to protecting user accounts from malicious attacks, security protocols provide users with the peace of mind that their accounts and personal information is safe. Ironically, that peace of mind is incumbent on users using the security protocols in the first place, which further relies on them accepting that security is needed. With the increased frequency of cyber security threats and data breaches over the last couple of years, users have grown to be less trusting of security experts and their measures. Security experts have equally become less trusting of users, and see them as the “the weakest link in the chain”. This has led to more cumbersome security practices such as mandatory 2FA and constant re-login flows which bottlenecks users from accomplishing essential tasks. Because of this break down in trust, there is a natural inclination to shortcut security altogether.

Build a culture of trust not fear

Building trust among users requires empowering them to believe that their individual actions have a larger impact on the security of the overall organization. If a user understands that their behavior can put critical resources of an organization at risk, they will more likely behave with security in mind. For this to work, nuance is key. Deeming that every resource needs a similarly high number of checks and balances diminishes how users perceive security and adds unnecessary bottlenecks to user workflows.

In order to lay the foundation for good security, it’s worth noting that risk analysis is the bedrock of security design. Instead of blindly implementing standard security measures recommended by the experts, a better approach is to tailor security protocols to meet specific use cases and adapt as much as possible to user workflows. Here are some examples of how to do just that:

Risk based authentication

Risk based authentication is a powerful way to perform a holistic assessment of the threats facing an organization. Risks occur at the intersection of vulnerability and threat. A high risk account is vulnerable and faces the very real threat of a potential breach. Generally, risk based authentication is about calculating a risk score associated with accounts and determining the proper approach to securing it. It takes into account a combination of the likelihood that that risk will materialize and the impact on the organization should the risk come to pass. With this system, an organization can easily adapt access to resources depending on how critical they are to the business; for instance, internal documentation may not warrant 2FA, while accessing business and financial records may.

Dynamically adaptive auth

Similar to risk based auth, dynamically adaptive auth adjusts to the current situation. Security can be strengthened and slackened as warranted, depending on how risky the access point is. A user accessing an account from a trusted device in a known location may be deemed low risk and therefore not in need of extra security layers. Likewise, a user exhibiting predictive patterns of use should be granted quick and easy access to resources. The ability to adapt authentication based on the most recent security profile of a user significantly improves the experience by reducing unnecessary friction.

Conclusion

Historically, security failed to take the user experience into account, putting the onus of securing accounts solely on users. Considering the fate of password security, we can neither rely on users nor stringent security mechanisms to keep our accounts safe. Instead, we should aim for security measures that give users the freedom to bypass them as needed while still protecting our accounts from attack. The fate of secure systems lies in the understanding that security is a process that must constantly adapt to face the shifting landscape of user behavior and potential threats.

About the author

Divya is a web developer who is passionate about open source and the web. She is currently a developer experience engineer at Netlify, and believes that there is a better workflow for building and deploying sites that doesn’t require a server—ask her about the JAMstack. You will most likely find her in the sunniest spot in the room with a cup of tea in hand.

More articles by Divya

Advani was seen at a major public function along with Modi in Gujarat after 2011.

Tejashwi brushes up on history, Rabri politics; party says it''ll emerge stronger.

A report was sent to Sonia and Rahul Gandhi to say that there was no dissidence in the party in Assam.

Root, Andrew, 1974-

Kahane, Adam

Dewey Library - KZ6047.V47 2017

The special will be shot on Stage 24 of the Warner Bros. Studio lot in Burbank, where the entire original series was filmed

The National Restaurant Association of India (NRAI) on Friday said the food and beverage industry is coming together to develop and identify alternati

Take a look at the pictures from Yuvraj Singh's retirement party:

Savouring Spielberg's fierce, fine movie; salivating over MAMI's line-up; gobbling a Shrek cake; visualising a desi Sisterhood of the Travelling Pants with Alia, Bhumi and more in Sukanya Verma's Super Filmi Week.

Kidd, Diana, author

We're excited to announce that we are welcoming Creative Market into the Dribbble family.