3 ms·

Avoid unrelated controversies, generic tangents, and internet tropes. https://news.ycombinator.com/newsguidelines.html https://news.ycombinator.com/newsguideli

by pvg 4y ago

Avoid unrelated controversies, generic tangents, and internet tropes. https://news.ycombinator.com/newsguidelines.html https://news.ycombinator.com/newsguidelines.html

denton-scratch 4y ago
Well, parent has actually expressed my reaction. The article seems to be a puff site, with no details about what they mean by "Zero Trust". I didn't follow any of the links (I don't think I should have to). If NIST has something to tell me, then they need to tell it me straight, not cloaked in partner sites and snazzy graphics.
- pvg 4y ago
  You can write a comment about things you don't like in the thing posted but not a reflexive trope response that can appear unchanged in anything with 'NIST' in it, which is what the guideline is about.
  - denton-scratch 4y ago
    Agreed, GP violated the guideline.
- tptacek 4y ago
  You're a Google search away from the entire industry explaining to you what they think "Zero Trust" is --- the term predates the OMB memo. Your best first read is the Google BeyondCorp paper.
- tomrod 4y ago
  https://csrc.nist.gov/publications/detail/sp/800-207/final https://csrc.nist.gov/publications/detail/sp/800-207/final https://csrc.nist.gov/publications/detail/white-paper/2022/05/06/planning-for-a-zero-trust-architecture/final https://csrc.nist.gov/publications/detail/white-paper/2022/0... https://csrc.nist.gov/publications/detail/sp/1800-35/draft https://csrc.nist.gov/publications/detail/sp/1800-35/draft
israrkhan 4y ago
I dont blame the parent for paranoia. NIST has been involved in standardizing protocol/algorithms with backdoors. It is not a controversary, it is documented. Although they pulled off the standard when it became public news [1]. [1] https://www.securityweek.com/nist-pulls-dualecdrbg-algorithm-random-number-generator-recommendations https://www.securityweek.com/nist-pulls-dualecdrbg-algorithm...
- pvg 4y ago
  It's not whether it's a controversy, it's that it's a generic, tropey and unsubstantive comment. 'X sux' is a bad comment even if X really sux.
  - t-3 4y ago
    "You're breaking the rules" is just as generic, tropey, and unsubstantive as any other low-effort comment, and continuing arguments to defend your derision is far more disruptive to the tone and flow of discussion. If you had just quietly downvoted, there would be little/no comment thread down here. P.S. Yes, I understand that I'm doing exactly the same thing, but I felt this should be said.
    - pvg 4y ago
      I'm doing exactly the same thing No, have at it, at the very bottom of the thread, hanging off a flagkilled comment is exactly where all this belongs and that is where we are, a safe little basement of meta. That's also what makes the irritating rule-complaints qualitatively different from gratuitously crap toplevel comments. Neither are good but one is way more not good than the other. just quietly To embrace an internet trope, Sir, this is a messageboard.

by pvg 4y ago

Avoid unrelated controversies, generic tangents, and internet tropes. https://news.ycombinator.com/newsguidelines.html https://news.ycombinator.com/newsguidelines.html

denton-scratch 4y ago

Well, parent has actually expressed my reaction. The article seems to be a puff site, with no details about what they mean by "Zero Trust". I didn't follow any of the links (I don't think I should have to). If NIST has something to tell me, then they need to tell it me straight, not cloaked in partner sites and snazzy graphics.

pvg 4y ago
You can write a comment about things you don't like in the thing posted but not a reflexive trope response that can appear unchanged in anything with 'NIST' in it, which is what the guideline is about.
- denton-scratch 4y ago
  Agreed, GP violated the guideline.
tptacek 4y ago
You're a Google search away from the entire industry explaining to you what they think "Zero Trust" is --- the term predates the OMB memo. Your best first read is the Google BeyondCorp paper.
tomrod 4y ago
https://csrc.nist.gov/publications/detail/sp/800-207/final https://csrc.nist.gov/publications/detail/sp/800-207/final https://csrc.nist.gov/publications/detail/white-paper/2022/05/06/planning-for-a-zero-trust-architecture/final https://csrc.nist.gov/publications/detail/white-paper/2022/0... https://csrc.nist.gov/publications/detail/sp/1800-35/draft https://csrc.nist.gov/publications/detail/sp/1800-35/draft

israrkhan 4y ago

I dont blame the parent for paranoia. NIST has been involved in standardizing protocol/algorithms with backdoors. It is not a controversary, it is documented. Although they pulled off the standard when it became public news [1]. [1] https://www.securityweek.com/nist-pulls-dualecdrbg-algorithm-random-number-generator-recommendations https://www.securityweek.com/nist-pulls-dualecdrbg-algorithm...

pvg 4y ago
It's not whether it's a controversy, it's that it's a generic, tropey and unsubstantive comment. 'X sux' is a bad comment even if X really sux.
- t-3 4y ago
  "You're breaking the rules" is just as generic, tropey, and unsubstantive as any other low-effort comment, and continuing arguments to defend your derision is far more disruptive to the tone and flow of discussion. If you had just quietly downvoted, there would be little/no comment thread down here. P.S. Yes, I understand that I'm doing exactly the same thing, but I felt this should be said.
  - pvg 4y ago
    I'm doing exactly the same thing No, have at it, at the very bottom of the thread, hanging off a flagkilled comment is exactly where all this belongs and that is where we are, a safe little basement of meta. That's also what makes the irritating rule-complaints qualitatively different from gratuitously crap toplevel comments. Neither are good but one is way more not good than the other. just quietly To embrace an internet trope, Sir, this is a messageboard.