Getting security right

Getting security right is difficult. A Bruce Schneier blog post from July 2018 contains a good example:

https://www.schneier.com/blog/archives/2018/07/defeating_the_i.html

and the low-cost defeat (which is actually an interesting article in itself):

https://blog.elcomsoft.com/2018/07/this-9-device-can-defeat-ios-usb-restricted-mode/

But it also contains a link to 'Schneier's Law' which is useful reading to anyone who thinks they are good at hacking things:

https://www.schneier.com/blog/archives/2011/04/schneiers_law.html

...and I have to admit that I hadn't heard of the Dunning-Kruger effect:

https://en.wikipedia.org/wiki/Dunning%E2%80%93Kruger_effect