Much of software security is based on the idea that the user will act reasonably and in their own best interest.
- Much of software security is based on the idea that the user will act reasonably and in their own best interest.
- "Yup, the user authenticated himself, so let him do whatever he wants with his data."
- In the past, that was mostly OK, and only didn't work in limited edge cases.
- For example, your child knowing your computer's password.
- But now with agents, that edge case has become a common case.