Mehboob Alam, CPI(ML) L leader in the Bihar Assembly, said, “I must say that Kumar skipped the meeting out of embarrassment over the refusal of the Centre to grant special category status to Bihar.”

The protesters waved Georgian and European Union flags and gathered outside the Georgian parliament

Special prayers and abhishekams were performed in Shivalayams which were decked up for the Kartheeka Masam festivities

Attempts at controlling the weather are still in the realm of uncertainty

We've got a few leftovers from Halloween to process, what's been happening with Passkeys in late 2024, have you tried to write HTML faster than a bot can suggest it to you, CSS anchor positioning and popover polyfills, scroll driven animation thoughts, CSS nesting, and what's the reason for Java?

An exhibition in New Delhi’s DAG covers pivotal moments of legendary artist and painter MF Husain’s artistic journey 

Divya Sasidharan calls into question the trade-offs often made between security and usability. Does a secure interface by necessity need to be hard to use? Or is it the choice we make based on years of habit? Snow has fallen, snow on snow.

Security is often synonymous with poor usability. We assume that in order for something to be secure, it needs to by default appear impenetrable to disincentivize potential bad actors. While this premise is true in many instances like in the security of a bank, it relies on a fundamental assumption: that there is no room for choice.

With the option to choose, a user almost inevitably picks a more usable system or adapts how they interact with it regardless of how insecure it may be. In the context of the web, passwords are a prime example of such behavior. Though passwords were implemented as a way to drastically reduce the risk of attack, they proved to be marginally effective. In the name of convenience, complex, more secure passwords were shirked in favor of easy to remember ones, and passwords were liberally reused across accounts. This example clearly illustrates that usability and security are not mutually exclusive. Rather, security depends on usability, and it is imperative to get user buy-in in order to properly secure our applications.

Security and Usability; a tale of broken trust

At its core, security is about fostering trust. In addition to protecting user accounts from malicious attacks, security protocols provide users with the peace of mind that their accounts and personal information is safe. Ironically, that peace of mind is incumbent on users using the security protocols in the first place, which further relies on them accepting that security is needed. With the increased frequency of cyber security threats and data breaches over the last couple of years, users have grown to be less trusting of security experts and their measures. Security experts have equally become less trusting of users, and see them as the “the weakest link in the chain”. This has led to more cumbersome security practices such as mandatory 2FA and constant re-login flows which bottlenecks users from accomplishing essential tasks. Because of this break down in trust, there is a natural inclination to shortcut security altogether.

Build a culture of trust not fear

Building trust among users requires empowering them to believe that their individual actions have a larger impact on the security of the overall organization. If a user understands that their behavior can put critical resources of an organization at risk, they will more likely behave with security in mind. For this to work, nuance is key. Deeming that every resource needs a similarly high number of checks and balances diminishes how users perceive security and adds unnecessary bottlenecks to user workflows.

In order to lay the foundation for good security, it’s worth noting that risk analysis is the bedrock of security design. Instead of blindly implementing standard security measures recommended by the experts, a better approach is to tailor security protocols to meet specific use cases and adapt as much as possible to user workflows. Here are some examples of how to do just that:

Risk based authentication

Risk based authentication is a powerful way to perform a holistic assessment of the threats facing an organization. Risks occur at the intersection of vulnerability and threat. A high risk account is vulnerable and faces the very real threat of a potential breach. Generally, risk based authentication is about calculating a risk score associated with accounts and determining the proper approach to securing it. It takes into account a combination of the likelihood that that risk will materialize and the impact on the organization should the risk come to pass. With this system, an organization can easily adapt access to resources depending on how critical they are to the business; for instance, internal documentation may not warrant 2FA, while accessing business and financial records may.

Dynamically adaptive auth

Similar to risk based auth, dynamically adaptive auth adjusts to the current situation. Security can be strengthened and slackened as warranted, depending on how risky the access point is. A user accessing an account from a trusted device in a known location may be deemed low risk and therefore not in need of extra security layers. Likewise, a user exhibiting predictive patterns of use should be granted quick and easy access to resources. The ability to adapt authentication based on the most recent security profile of a user significantly improves the experience by reducing unnecessary friction.

Conclusion

Historically, security failed to take the user experience into account, putting the onus of securing accounts solely on users. Considering the fate of password security, we can neither rely on users nor stringent security mechanisms to keep our accounts safe. Instead, we should aim for security measures that give users the freedom to bypass them as needed while still protecting our accounts from attack. The fate of secure systems lies in the understanding that security is a process that must constantly adapt to face the shifting landscape of user behavior and potential threats.

About the author

Divya is a web developer who is passionate about open source and the web. She is currently a developer experience engineer at Netlify, and believes that there is a better workflow for building and deploying sites that doesn’t require a server—ask her about the JAMstack. You will most likely find her in the sunniest spot in the room with a cup of tea in hand.

More articles by Divya

Many weddings are being performed at the temple; devotees from the Telugu States, Odisha and Chhattisgarh are arriving to have darshan of the deity during Karthika Masam

The police use lathi charge to disperse protesters and the Opposition questions government’s use of force on aspirants

A group of people are travelling to Busan in a train. So are zombies.

In addition to Hussainsagar, Chhath Puja is being celebrated at 49 other locations across the twin cities of Hyderabad and Secunderabad.

Police have arrested one person and seized the motorcycle used to commit the crime while claiming that two other absconding persons would be caught ‘very soon’

CM Bhupendra Patel spoke with collectors of Navsari and Valsad districts, directing them to shift residents of low-lying areas to safer places

Complaint filed by contractor in charge of installation and maintenance said around 3,800 bamboo lights and 36 ‘gobo projector’ lights went missing in May

2008 USAIN (United States Agricultural Information Network) Conference

Tradition in Transition: Information Fueling the Future of Agbiosciences

April 27 – 30, 2008 Wooster, OH

University of Florida is an institutional member of USAIN, an organization whose primary purposes are to promote discussion of agricultural issues and trends, to develop and influence national agricultural information policy, to make recommendations to the National Agricultural Library (NAL) and to increase collaborations between member partners (http://www.usain.org/). USAIN does an excellent job communicating legislative changes to its members, and then working with members to get involved with state and national government.

The conference was hosted by Ohio State University and held at the Ohio Agricultural Research and Development Center, closely situated next to a beautiful arboretum and rose garden.

Here are a few of the most important highlights from the conference:

1. The AgNIC Born Digital Steering Committee, of which UF is a participant, met for the first time to begin phase I of the born digital initiative. Here at UF it used to be we would receive a copy of IFAS Extension resources, which we would catalog and make available in our print collection. Many Extension resources (documents, websites, etc) are now published only in digital format and while this format increases access to the current resources, many of these older resources are at risk of being permanently lost due to a lack of consistent preservation processes. This is a problem not just at UF, but at almost every land-grant throughout the nation. The goal of this steering committee is to identify digitization standards (selection, metadata, format, etc.) and to develop an infrastructure to assist the land-grants in developing their own processes at the local level. The other institutions participating are Univ. of Arizona, Ohio State, Colorado State, Texas A&M, Cornell, Univ. of Minnesota, Purdue, and potentially Michigan State and Univ. of Illinois at Urbana-Champaign.

2. Mary Ochs (Cornell) Peter Ballantyne and Barbara Hutchinson (IAALD) spoke about Agbioscience information for the worldwide community. There is a strong need to "make research information easy to access for current and future generations" through common international standards, open applications, user friendly information & data, andlocal and global action . A large amount of agricultural information is created within the U.S., and we should do more to share that information with the international community. The result of this discussion was the creation of an International Agricultural Information Interest Group which will focus on the first steps of bringing in librarians from other countries to future USAIN conferences, as well as providing more Ag information on the USAIN website. Here is Peter Young - the Director of the National Ag Library - speaking about global collaborations: http://iaald.blip.tv/file/864317/

3. Peter gave the NAL update, mentioning the new Blueprint for Success: The National Agricultural Library 2008-2012. Many of you may have seen in the Washington Post the article, A Precious Resource at Risk, about the drastic budget cuts facing NAL in the upcoming year. I believe it was at the last USAIN that I learned that the NAL has had a flat budget for the last twenty years. Somehow I didn't write down the percentage they will have to cut, but I believe it was either 40% or 60% - both staggering cuts. This will prevent the NAL from preserving their special collections, from buying print materials, from participating in Interlibrary Loan, and more. For more information, see the USAIN website for Lobbying Congress for Support.

Many of the invited speakers spoke on biofuels, bioenergy/bioproducts, and sustainable farming, including David Kline, an Amish farmer and author/editor of Farming Magazine. Without going into too much detail, here are a few of the interesting things I learned from all the speakers:

1. In the 1850’s ethanols were used for lighting, but in the 1860s-1906 an ethanol tax was enacted (making kerosene more competitive). The first ethanol fueled auto was the Ford Quadricycle (1896). The first flex-fuel car: Model-T (1908)!
2. In 2008 there were 11 billion gallons of ethanol produced from corn. Unfortunately there are a number of issues related to: water quality, soil erosion, water supply, biodiversity, loss of grasslands, increase in feed costs. Also, corn is displacing other crops -- leading to food riots.
3. The cellulosic biofuels (corn, switchgrass, MSW, forest residues, etc.) industry will grow rapidly in coming years. And will bring some very specific questions, such as how will supply chains develop (big issue), what are the implications for the food/feed/fiber markets, how will environmental issues be addressed, can we coproduce fuels and foods, and how can farmers and local communities benefit?
4. Lastly, has been shown to increase smog and cancerous benzene emissions. Also, all current biofuels increase carbon dioxide emission relative to gasoline.

There was quite a bit more information available from all the speakers. If you are interested in reading the speaker presentations, they are available for download: http://www.oardc.ohio-state.edu/usain/downloads.html

Usain Bolt’s superhuman effort of 9.58 seconds (100m) and 19.19 seconds (200m) at the 2009 World Championships in Berlin have not been threatened ever since.

The lineup features 314 women and 278 men, spanning ages from 16 to 59 and with 46 states represented.

Neeraj Chopra will be up against a top-class field in Lausanne, with five of the top-six finishers in the Paris Olympics final competing

Neeraj Chopra saved the best for the last as his sixth and final attempt measured 89.49m.

Volunteers went to Valencia's City of Arts and Sciences for the first coordinated clean-up organised by regional authorities

How we deploy AI in our work and product development may hold as much weight in shaping the risks and ethics as the specific models we choose.

KPCC spokesperson M. Lakshman files a complaint with the Devaraja Police in this regard against activist Snehamayi Krishna

The PCB was told by the ICC that BCCI won't send its team to Pakistan after the decision was communicated to the world governing body.

Tensions escalated among the students after UPPSC announced a new schedule for the preliminary exams.

It’s important to anticipate RNA viruses and how they could evolve because they mutate rapidly and adapt quickly to new conditions

The highlight of the ‘kanda sashti’ festival is the ‘Soorasamharam,’ following which the ‘thirukalyanam’ took place at the hill temple.

While the secondary screen’s potential is not fully realised yet, it’s an exciting addition that could be improved with future updates

USA thus jumped to the top of Group A with two wins from as many games ahead of the clash against India

His family took numerous loans to sustain Swapnil’s dream, a testament to their unwavering belief in his potential

It was a Catalan opening wherein Gukesh got the complications running in his favour in the later stages of the middle game after grabbing a pawn

Massive clinical trial including developing nations demonstrates carbetocin is no less effective or safe than oxytocin

A special Suzuki Hayabusa GP Edition is set to be showcased at the Autolook Week Torino motor festival.

Lewis Library - ML174.R26 2018