Back to Basics: Building Resilient Cyber Defenses for Multiple Use Cases

Yael Grauer, a program manager at Consumer Reports, opens by arguing that digital security advice has changed little even as threats have shifted. She uses gardening analogies, such as attack surface, plant hardiness zones and layered soil, to build a framework for judging whether a recommendation fits a particular person's situation rather than applying it blindly.

The middle of the talk revisits long-standing tips like password managers, multi-factor authentication and keeping software updated, which she considers sound for most people. It then tests newer viral suggestions, including disabling ad IDs, avoiding Signal after rumors about it, using a VPN, leaving phones at protests, changing period tracking apps, and covering cameras or microphones. For each, she weighs the threat model and notes where a tip helps or backfires. For example, pushing someone in a stalking situation to remove stalkerware immediately can increase physical risk. She also points out that some older advice became outdated as the technology changed.

She then describes Security Planner, a free tool that builds a personalized plan from questions about devices and goals, and acknowledges its limits, such as having no support desk. She closes by arguing that individual settings matter less than broader ecosystem change, including legislation, public pressure and holding companies accountable.