4 ms·

The metadata around peoples behaviors could be a very valuable source of operational intelligence when targeted at specific people. For example: Imagine if you

The metadata around peoples behaviors could be a very valuable source of operational intelligence when targeted at specific people. For example: Imagine if you could track the security teams availability and behavioral patterns. You could infer when the business has been hacked or there is going to be a release they have been hacked, you could trade off this information for profit.

asdff 3y ago
It would take some serious hollywood plot logic to come up with some actual business decision even if you had all of this information in front of you. Are you going short based on what time the security team is clocking into work or something? They could get hacked but you might have no idea when that will finally affect the stock price if at all. You'd be way better off just bribing someone from that company to tell you whatever, than to come up with some sort of model that actually indicates something reliable based on this metadata.
- worthless-trash 3y ago
  > You'd be way better off just bribing someone from that company to tell you whatever, than to come up with some sort of model that actually indicates something reliable based on this metadata. You'd be better off hacking the company yourself if you wanted effectiveness. Let me give you a lower stakes example, I can figure out when you're at work to know when to rob your place via when you post on instagram. Lower stakes but same theory.
  - asdff 3y ago
    That seems a lot less reliable and far more risky than just casing a house and seeing when the cars leave, since people often post on instagram after the fact. That's the thing with a lot of these digital "what if" scenarios. The confidence you have in your model is lower compared to old fashioned techniques that work well enough for far cheaper.
    - worthless-trash 3y ago
      Here is an example of an IOT owned by a security team being abused ( https://practical-tech.com/2023/06/13/how-an-amazon-fire-kids-tablet-was-allegedly-used-to-stalk-a-security-pro/ https://practical-tech.com/2023/06/13/how-an-amazon-fire-kid... ), Admittedly the attack vector is a little different but its not insane to think about the IOT software being abused.
    - worthless-trash 3y ago
      I agree, we can debate the "this is easier scenarios all day long". One has a cheaper but perhaps less reliable indicator.

asdff 3y ago

It would take some serious hollywood plot logic to come up with some actual business decision even if you had all of this information in front of you. Are you going short based on what time the security team is clocking into work or something? They could get hacked but you might have no idea when that will finally affect the stock price if at all. You'd be way better off just bribing someone from that company to tell you whatever, than to come up with some sort of model that actually indicates something reliable based on this metadata.

worthless-trash 3y ago
> You'd be way better off just bribing someone from that company to tell you whatever, than to come up with some sort of model that actually indicates something reliable based on this metadata. You'd be better off hacking the company yourself if you wanted effectiveness. Let me give you a lower stakes example, I can figure out when you're at work to know when to rob your place via when you post on instagram. Lower stakes but same theory.
- asdff 3y ago
  That seems a lot less reliable and far more risky than just casing a house and seeing when the cars leave, since people often post on instagram after the fact. That's the thing with a lot of these digital "what if" scenarios. The confidence you have in your model is lower compared to old fashioned techniques that work well enough for far cheaper.
  - worthless-trash 3y ago
    Here is an example of an IOT owned by a security team being abused ( https://practical-tech.com/2023/06/13/how-an-amazon-fire-kids-tablet-was-allegedly-used-to-stalk-a-security-pro/ https://practical-tech.com/2023/06/13/how-an-amazon-fire-kid... ), Admittedly the attack vector is a little different but its not insane to think about the IOT software being abused.
  - worthless-trash 3y ago
    I agree, we can debate the "this is easier scenarios all day long". One has a cheaper but perhaps less reliable indicator.