I wrote about Oura's security and privacy practices earlier this year for this.weekinsecurity.com, and found:

• Oura rings *don't* end-to-end encrypt users' health data;
• Oura *can* access its users' data;
• Oura told me that the company *has* received U.S. government demands for users' data.

A commonly-misunderstood aspect of computer security is that you are battling computers.

No. That is not right at all. Computers are barely involved.

You are battling humans who eat apathy and coordination problems.

Code comments that explain why you did it that way are good.

Code comments that explain why you *didn't* do it a different way are GREAT.

Software engineers of the world, I beg you.

Stop disabling copy and paste in password fields.

Sincerely,

Someone with non-human memorable 20+ character passwords generated by a password manager.

I ran into an obnoxious engagement hack today: a spammer used a subject line that was engineered to be a likely subject line in my e-mail history, thereby spoofing Apple Mail into threading it together with a discussion with a trusted colleague. It took me a second to realize what had happened.

I love this explanation.