Myth: buying in bulk

The next-gen gaming consoles (PlayStation 4, XBox One) contain 8-GB of RAM. That means a sometime jerkyness in games as the console loads scenes into memory from disk. Why so little memory? Wouldn't it be better to just put more RAM in the device, like doubling to 16-GB? Sure, while RAM is expensive for you and me ($50 for 8GB), Sony/Microsoft can buy in bulk and get a cheaper price, like $20. That doesn't make much difference when selling the console for over $400.

Actually, they don't get such savings. "Buying in bulk" is a myth. If it costs us $50/8-GB, then adding that memory to the console will jack up its price by $50. At least.

Let me prove it to you. On NewEgg right this second, you can get a single 8-GB DIMM for your desktop computer for $49.99. On the bulk spot market, the 4-gigabit chips themselves cost $3.11/chip when buying in very large quantities of 10,000 chips at a time. Since you need 16 of those chips to create a DIMM, that comes out to $49.76 per 8-GB.

In other words, within the margin of error, the price for a single DIMM on NewEgg roughly equals the bulk price on the spot market.

Employee training

From: Human Resources
To: All Employees

Due to a recent wave of phishing attacks, we are now mandating a course
of Computer Based Training (CBT) on how to recognize and avoid phishing 
attacks. Go to the following site and login with your corporate 
credentials and download the CBT software:

http://cbt.erratasec.com/training.html

Courses must be completed by end-of-business on Friday. Next week, 
we’ll come around to all managers to discuss any employees who have not 
completed the training.

This is humor, of course. The above link doesn't work, but if it did, in response to the login it would say "you idiot, don't do this".

Training employees to recognize phishing emails is regularly undermined by HR who is constantly phishing employees for 401k enrollment, life insurance, sexual harassment training, and the like.

Myth: that secret coffee slush fund

The biggest myth in cybersecurity is that there is some sort of secret slush fund of money going to waste, such as buying coffee for employees. The cybersecurity guys firmly believe that this money can be better spent on improving security, such as appsec code scanners, a better IPS, training for employees, or more employees.