3 ms·

While this may good true for something like medical units, legally mandating multiple vendors for private companies is unnecessary and adds inefficiencies where

While this may good true for something like medical units, legally mandating multiple vendors for private companies is unnecessary and adds inefficiencies where the natural consequences of monoculture will make the market more resilient. Some companies will divest of crowd strike and smaller players in that market will grow. Some companies will digest of windows, improving platform diversity. Hopefully release engineering at CS improves, strengthening their product, and for those that won’t do anything, insurance rates will rise making them think harder about this problem in the future. Based on comments here, regulation requiring a checkbox security suite is what caused this to begin with. The answer isn’t more regulation.

PreInternet01 2y ago
> legally mandating multiple vendors for private companies is unnecessary The days-long airport chaos that most of the world just went through recently would suggest otherwise?
- jonhohle 2y ago
  In most cases an airport delay is not a life or death scenario, so I don’t think law is necessary beyond standard contract law that already exists.
  - tristor 2y ago
    Air Travel, and in general Transportation as a sector, is society-critical infrastructure and should be held to different standards than Joe's Barber Shop.
    - jonhohle 2y ago
      This wasn’t a safety issue. Not all transportation providers were down. Did it cause massive disruptions to transportation? Absolutely. This was caused by over regulation in the first place. Adding more regulation only entrenches existing players making the market worse when things like this happen, not better. Those that chose monoculture should be punished in the market.
  - PreInternet01 2y ago
    Yeah, sure. So we just accept "your holiday will be disrupted" since "IT is just a very competitive sector"? I won't, but you be you...
    - jonhohle 2y ago
      I was recently told that my family of six, weighing a total of around 500lbs, could not get on a flight to Hawai’i because of weight restrictions and we were the party chosen to get bumped. We had hotels that couldn’t be canceled because we were checking in later that night. That didn’t have to do with a massive IT outage, just crappy business practices. There are already laws to make people while in these scenarios. Can they replace missed days playing at the beach with children? No, of course not. Will I eve choose to fly an airline that bumped four kids and two below average weight adults because the plane weighed to much. They certainly won’t be my first choice. I also had a pending flight home on an airline that was hard down for part of the Friday of doom. My flight wasn’t that day, but were it Delta I probably would have been affected. They can’t fulfill their contract, so minimally I would need a refund, and optimally hotels and rebooked flights on another airline. The underlying reason isn’t important and I don’t need more regulation for an already overly regulated industry. Airline flights, while reliable, are not guaranteed. It’s massively inconvenient when they fail. Plan accordingly.[0] 0 - https://www.transportation.gov/airconsumer/fly-rights#Delayed-and-Cancelled-Flights https://www.transportation.gov/airconsumer/fly-rights#Delaye...
salawat 2y ago
>where the natural consequences of monoculture will make the market more resilient. ...This is not a natural consequence of monoculture. You trade resilience/fault-tolerance for exposure to high-breadth, high-severity existential breakdowns. The only people who like monocultures are those tasked with optimizing costs. There, monoculture looks great. In terms of actually building things that fail gracefully though, fuggedaboutit.
- jonhohle 2y ago
  I’m advocating for vendor diversity through market action, not government intervention. That’s what made this situation likely in the first place: requirements for a particular type of security software provided by only a few vendors.

PreInternet01 2y ago

> legally mandating multiple vendors for private companies is unnecessary The days-long airport chaos that most of the world just went through recently would suggest otherwise?

jonhohle 2y ago
In most cases an airport delay is not a life or death scenario, so I don’t think law is necessary beyond standard contract law that already exists.
- tristor 2y ago
  Air Travel, and in general Transportation as a sector, is society-critical infrastructure and should be held to different standards than Joe's Barber Shop.
  - jonhohle 2y ago
    This wasn’t a safety issue. Not all transportation providers were down. Did it cause massive disruptions to transportation? Absolutely. This was caused by over regulation in the first place. Adding more regulation only entrenches existing players making the market worse when things like this happen, not better. Those that chose monoculture should be punished in the market.
- PreInternet01 2y ago
  Yeah, sure. So we just accept "your holiday will be disrupted" since "IT is just a very competitive sector"? I won't, but you be you...
  - jonhohle 2y ago
    I was recently told that my family of six, weighing a total of around 500lbs, could not get on a flight to Hawai’i because of weight restrictions and we were the party chosen to get bumped. We had hotels that couldn’t be canceled because we were checking in later that night. That didn’t have to do with a massive IT outage, just crappy business practices. There are already laws to make people while in these scenarios. Can they replace missed days playing at the beach with children? No, of course not. Will I eve choose to fly an airline that bumped four kids and two below average weight adults because the plane weighed to much. They certainly won’t be my first choice. I also had a pending flight home on an airline that was hard down for part of the Friday of doom. My flight wasn’t that day, but were it Delta I probably would have been affected. They can’t fulfill their contract, so minimally I would need a refund, and optimally hotels and rebooked flights on another airline. The underlying reason isn’t important and I don’t need more regulation for an already overly regulated industry. Airline flights, while reliable, are not guaranteed. It’s massively inconvenient when they fail. Plan accordingly.[0] 0 - https://www.transportation.gov/airconsumer/fly-rights#Delayed-and-Cancelled-Flights https://www.transportation.gov/airconsumer/fly-rights#Delaye...

salawat 2y ago

>where the natural consequences of monoculture will make the market more resilient. ...This is not a natural consequence of monoculture. You trade resilience/fault-tolerance for exposure to high-breadth, high-severity existential breakdowns. The only people who like monocultures are those tasked with optimizing costs. There, monoculture looks great. In terms of actually building things that fail gracefully though, fuggedaboutit.

jonhohle 2y ago
I’m advocating for vendor diversity through market action, not government intervention. That’s what made this situation likely in the first place: requirements for a particular type of security software provided by only a few vendors.