Not op and I don’t think they forfeit that right at all.
What I have wrestled with is: where is the line between taking precautions against known threats and victim blaming?
Maybe the line is temporal.
After someone is victimized, we can acknowledge that and maybe keep our mouths shut with victim blaming nonsense like, “you should have done XYZ”. Because that doesn’t help, further hurts the victim, and saying it makes you an asshole.
Prior to being victimized isn’t it up to each of us to evaluate and manage personal risks given all the threats we face every day? I think so and I think each of us is responsible for learning about and managing risk and deciding what precautions to take.
That isn’t to say we must take every precaution no matter how impractical or outrageous (like not walking on the sidewalk or never taking nude selfies).
It is never acceptable to tell someone else what their risk tolerance is or to dictate to them what precautions to take.
Doing that is being an asshole.
And I now believe that is where the line is drawn.
It is shitty to tell others how to live their life. It is good, however, to be willing to help people be aware of and understand the risks they face and offer advice if asked, on mitigating those risks. Provided your goal is to help and you don’t act like a sanctimonious ass.
Whatever we do, we may still be victimized and the blame always rests squarely on the shoulders of the perpetrator. They took the action that victimized us.
If you couldn’t tell I do cybersecurity as a living. My job isn’t to manage risk, it’s to help others achieve their objectives while understanding and managing risks they face.
It’s obnoxious for people to tell people what risks to take. And demonstrates a complete lack of compassion to lecture people when these risks don’t pan out.
That’s the issue here, which people seem to be missing.
Not op and I don’t think they forfeit that right at all.
What I have wrestled with is: where is the line between taking precautions against known threats and victim blaming?
Maybe the line is temporal.
After someone is victimized, we can acknowledge that and maybe keep our mouths shut with victim blaming nonsense like, “you should have done XYZ”. Because that doesn’t help, further hurts the victim, and saying it makes you an asshole.
Prior to being victimized isn’t it up to each of us to evaluate and manage personal risks given all the threats we face every day? I think so and I think each of us is responsible for learning about and managing risk and deciding what precautions to take.
That isn’t to say we must take every precaution no matter how impractical or outrageous (like not walking on the sidewalk or never taking nude selfies).
It is never acceptable to tell someone else what their risk tolerance is or to dictate to them what precautions to take.
Doing that is being an asshole.
And I now believe that is where the line is drawn.
It is shitty to tell others how to live their life. It is good, however, to be willing to help people be aware of and understand the risks they face and offer advice if asked, on mitigating those risks. Provided your goal is to help and you don’t act like a sanctimonious ass.
Whatever we do, we may still be victimized and the blame always rests squarely on the shoulders of the perpetrator. They took the action that victimized us.
If you couldn’t tell I do cybersecurity as a living. My job isn’t to manage risk, it’s to help others achieve their objectives while understanding and managing risks they face.
Well said. It’s all risk management.
It’s obnoxious for people to tell people what risks to take. And demonstrates a complete lack of compassion to lecture people when these risks don’t pan out.
That’s the issue here, which people seem to be missing.