re: #191 Targetpractice

Can you ensure 100% compliance? That if the training is “good enough,” 100% of the time when a person is asked for their password by a friend or superior, they’ll refuse to give it?

No, you can’t. My real point, though, is that even if Snowden had totally failed to convince co-workers to give him passwords, or if he felt their training would prevent them from giving passwords to him, he would have found other ways to get the information because that’s what he was determined to do.

There’s no such thing as perfect security.