2 ms·

How long before our evident incompetence as a profession comes back to bite us in the form of more draconian regulation about who and what is allowed to run in

How long before our evident incompetence as a profession comes back to bite us in the form of more draconian regulation about who and what is allowed to run in kernel space, or other privileged contexts, on critical infrastructure?

remram 2y ago
Is that a "bite"? I have wished for this for a long time.
pdimitar 2y ago
Whenever that time comes it would be at least 50 years too late. But I hope to see it in my lifetime.
- cmrdporcupine 2y ago
  The problem I think is that it would just take the form of regulatory capture. A few companies would be blessed, and the rest of us locked out. And we'd still have screwups like yesterday, but this time with Government Approval. Already it's amazing how the media is presenting this like it's a natural disaster, instead of an entirely preventable display of incompetence... A business entity whose shares only dropped 10% after causing untold billions of damage to the economy. Gives us all a bad name.
  - pdimitar 2y ago
    > Already it's amazing how the media is presenting this like it's a natural disaster, instead of an entirely preventable display of incompetence Amazing? Super predictable I'd say. > Gives us all a bad name. That is sadly true.
  - pdimitar 2y ago
    > The problem I think is that it would just take the form of regulatory capture. A few companies would be blessed, and the rest of us locked out. And we'd still have screwups like yesterday, but this time with Government Approval. Yeah agreed. It would require no corruption... which is the true fantasy trope of our times.
adrr 2y ago
What security software runs in user space? Even on the Linux side I struggle to name any except snort or any of the open source root kit scanners. How would you enforce security policies in user space?
closeparen 2y ago
CrowdStrike's widespread deployment is encouraged by regulation.
mardifoufs 2y ago
I usually agree that we are heading towards regulation (software engineering is already a regulated title where I live) but in this case, crowdstrike had such a blast radius exactly because of regulation.
marcosdumay 2y ago
That entire thing was caused by stupid draconian regulation. Systems like CrowdStrike are mandated, not hired freely.
mr90210 2y ago
Robert C. Martin has been talking about this same topic for years. He believes that just like in the medical field, the software industry must self-organise before government start imposing draconian measures about how software should be developed.

remram 2y ago

Is that a "bite"? I have wished for this for a long time.

pdimitar 2y ago

Whenever that time comes it would be at least 50 years too late. But I hope to see it in my lifetime.

cmrdporcupine 2y ago
The problem I think is that it would just take the form of regulatory capture. A few companies would be blessed, and the rest of us locked out. And we'd still have screwups like yesterday, but this time with Government Approval. Already it's amazing how the media is presenting this like it's a natural disaster, instead of an entirely preventable display of incompetence... A business entity whose shares only dropped 10% after causing untold billions of damage to the economy. Gives us all a bad name.
- pdimitar 2y ago
  > Already it's amazing how the media is presenting this like it's a natural disaster, instead of an entirely preventable display of incompetence Amazing? Super predictable I'd say. > Gives us all a bad name. That is sadly true.
- pdimitar 2y ago
  > The problem I think is that it would just take the form of regulatory capture. A few companies would be blessed, and the rest of us locked out. And we'd still have screwups like yesterday, but this time with Government Approval. Yeah agreed. It would require no corruption... which is the true fantasy trope of our times.

adrr 2y ago

What security software runs in user space? Even on the Linux side I struggle to name any except snort or any of the open source root kit scanners. How would you enforce security policies in user space?

closeparen 2y ago

CrowdStrike's widespread deployment is encouraged by regulation.

mardifoufs 2y ago

I usually agree that we are heading towards regulation (software engineering is already a regulated title where I live) but in this case, crowdstrike had such a blast radius exactly because of regulation.

marcosdumay 2y ago

That entire thing was caused by stupid draconian regulation. Systems like CrowdStrike are mandated, not hired freely.

mr90210 2y ago

Robert C. Martin has been talking about this same topic for years. He believes that just like in the medical field, the software industry must self-organise before government start imposing draconian measures about how software should be developed.