Stop Boiling the Ocean - How to Succeed with Small Gains

Explore a conference talk from GrrCon 2018 that challenges the notion of setting ambitious goals and instead advocates for achieving success through small, incremental gains. Learn how to apply the concept of marginal gains to product security, understand the pitfalls of traditional goal-setting, and discover the power of identity-based habits. Gain insights into the effectiveness of systems over goals, the importance of consistency, and how to create positive feedback loops in IoT device security. Examine real-world examples, including Team Sky's approach to cycling success, and understand how to implement the "1% Rule" for continuous improvement in cybersecurity practices.

Introduction
Boiling an ocean
Boiling the ocean
Learning from mistakes
Goals
Systems vs Goals
Consistency
Goals Reduce Happiness
Goals Are At Odds With Long Term Progress
Marginal Gains
Team Sky
Small Gains
Identity Based Habits
Product Security
Feedback Loop
IOT Devices
The 1 Rule
Conclusion