4 ms·
> The question is whether the pains we’re currently feeling are enough to cause a change in the industries affected. Considering downthread there are honest su
by yaw12 5y ago
> The question is whether the pains we’re currently feeling are enough to cause a change in the industries affected.
Considering downthread there are honest suggestions to send special forces after the ransomware gangs, I’m gonna go with “probably not”. That type of denial is pervasive.
The F500 and companies like JBS just need to move essentially dataframes around from automation to automation, but somehow the software ecosystem is still building that with the same tools used to write Google. The next answer is usually “they don’t invest in a security team, clearly,” and I’m waiting for that subthread to kick off, too, to continue the denial.
Software complexity is the enemy, not the malicious actors exploiting it. Fix one, fix the other.
- Dylan16807 5y agoI'm confused, why isn't a security team a good way to make and enforce things like smaller attack surfaces and network isolation?
- viraptor 5y agoIt is, but it's never going to be perfect. Nobody has achieved that so far. Or at least not in an environment where you have international distribution and thousands of endpoints touching different areas of the system.
- throwaway3699 5y agoSoftware complexity is hard to tackle because it's really the underlying business complexity that's being modelled, which is usually beurocratic, Byzantine-like. See the recent post on why the Uber app is so large: https://news.ycombinator.com/item?id=25376346 https://news.ycombinator.com/item?id=25376346