When Security Friction Becomes the Backdoor

This Threat Vector episode features Birat Niraula discussing how security friction can either protect or create risk, emphasizing that poor security UX drives users to bypass controls. Key takeaways include distinguishing protective friction (e.g., MFA, jump hosts) from harmful friction, the tendency for DevOps teams to create backdoors when slowed down, emerging AI deployment risks, and the value of seamless, embedded security akin to the Chrome browser model. The conversation advocates integrating security early in design processes and using AI agents to scale security reviews without impeding business velocity.