3 ms·
"Never Attribute to Malice That Which Is Adequately Explained by Stupidity" or something like that
by tobyhinloopen 9y ago
"Never Attribute to Malice That Which Is Adequately Explained by Stupidity" or something like that
- friendzis 9y agoThe further into the future we are, the more I start to believe inverse to be true in general, not only in security world. For some reason in security world a neat extra breaking security is treated as possible intentional backdoor. Without treating mistakes, incompetencies, outright stupidities as malicious, we grow a new generation of technologists (including me, sadly), who do not bother to become adept in problem domain, consult with experts, perform strict analysis, cause tons of technical debt for the sake of moving fast. Good enough is the norm. We still see plain text, hashed without salt, hashed with the same salt password databases leaked. Maybe it was incompetence. Maybe it was stupidity. Maybe it was FIXME. Maybe the loaded gun was left on dinner table near a toddler because "I'm only going to bathroom". This is rhetoric question: can this stupidity be seen as malicious?
- bjt2n3904 9y agoOops. We accidentally wrote our app to send your contacts list to our servers, to a URL which handled the incoming data.
- squarefoot 9y agoTrue but errors due to stupidity should distribute randomly. When they do the damage in one direction only, I smell malice.