ang_cire

33 ms·

511.
by ang_cire 2y ago
Show me a company that claims it's never been breached in some way, and I'll show you a company that has no clue about security, including their prior breaches.
512.
by ang_cire 2y ago
State actors breaking into systems aren't doing it to use them in a botnet...
513.
by ang_cire 2y ago
To add onto this, the Pwnie Awards also go to people who get attacked , which is something that e.g. civil engineers certainly don't get blamed for (i.e. if a terrorist blows up their bridge). We would need a way to draw a liability l
514.
by ang_cire 2y ago
It didn't say "convict", it said "prove". Evidence can prove someone guilty even if a court is unable to do anything about it.
515.
by ang_cire 2y ago
No, that is about a court re-trying someone, which they cannot do. The evidence itself may well prove their guilt. The point being that a lack of evidence of guilt is not evidence of a lack of guilt. But we require evidence of guilt for c
516.
by ang_cire 2y ago
Is it not possible to class-action the whole prison population at that location? For large prisons, is that still not enough people? Or does class-action not apply to this kind of violation at all?
517.
by ang_cire 2y ago
No, the lawyer was working pro bono. 600k is what those hours would have cost.
518.
by ang_cire 2y ago
It does work, but user training is something that- whether for security or otherwise- is a continuous process. New hires. Training on new technologies. New operating models. etc etc etc... IT is not static; there is no such thing as a probl
519.
by ang_cire 2y ago
> The flaw in the professional approach is how to get over the fact that features sell now, for cash, and building securely adds (a small amount of) cost for no visual benefit Because Capitalism means management and shareholders only car
520.
by ang_cire 2y ago
No one is objecting to writing secure software, but saying "just do it" is big "draw the rest of the owl" energy. It's hard to do even for small-medium programs, nevermind enterprise-scale ones with 100+ different
521.
by ang_cire 2y ago
> how founders think The fact you literally believe your method of thinking is any different than other employees is exactly why 90% of startups fail.
522.
by ang_cire 2y ago
Unnecessary hierarchy is a cancer. CEO's aren't geniuses or rockstars, and if executives can't convince their employees- the actual technical people who will implement whatever plan is- that a given plan is the right one, 99%
523.
by ang_cire 2y ago
Even if we accept that it wasn't supposed to launch (which is a big 'if'), why was it not fitted with a destructive abort/ Flight Termination System?
524.
by ang_cire 2y ago
Frankly, the end of the article where it says that CNAs don't have the time to verify the vulns being reported for new CVE issuance, is the real problem. If you're an authoritative entity over a system (CVEs) that can break prod
525.
by ang_cire 2y ago
I mean, no matter where you fall philosophically, Wikipedia does take resources to host, including storage costs, and they're always strapped for cash. If they could be assured of never needing to reduce pages to not run out of money
526.
by ang_cire 2y ago
To be frank, if I could choose which of those to achieve, and it would be perfectly achieved, I'd choose actual security, but the reality is that it's impossible to actually meet most SLAs. I have met exactly 0 infosec folks who c
527.
by ang_cire 2y ago
Great piece. Good on them for getting out.
528.
by ang_cire 2y ago
Yo ho ho...!
529.
by ang_cire 2y ago
I'm excited to see where this goes. Whether you agree or disagree with Apple, them losing (or even just lessening) their monopoly status would make room for new and upcoming businesses. New apps, new app stores, etc etc. Disruption may
530.
by ang_cire 2y ago
If customers being informed about your business practices will result in harm to shareholder value, you've got a problem.
531.
by ang_cire 2y ago
What? Basically every store I go to adds a fee for credit transactions.
532.
by ang_cire 2y ago
Essentially, yes. Space and scope/mission creep.
533.
by ang_cire 2y ago
It's great that you personally don't generalize it into a stereotype about Indian people, but that is not what a stereotype is, and "Indian people are good at math" is the stereotype, not "high skilled Indian visa h
534.
by ang_cire 2y ago
The same reason I would not fault a print encyclopedia publisher for not including video game strategy guides?
535.
by ang_cire 2y ago
That's why you need to always ensure authority rests with individuals, or the ability to secure against unjust authority. The second your only recourse against authority is to politely ask it not to do something bad to you (maybe, for
536.
by ang_cire 2y ago
That expectation emerged because that has largely been the goal of the field of AI research since it's inception. LLMs stepped into a field that has existed in popular consciousness for decades and decades, and the companies running LL
537.
by ang_cire 2y ago
Well, probably by being much more selective about what we put in than just training on the most cheap and large corpus that is the internet. This is not a technical limitation at all, this is purely about cost and time, and companies wantin
538.
by ang_cire 2y ago
Now you're backtracking. Those other primates weren't humans. In human history, pets are not recent by any measure. We have no evidence of a specific period of homo sapiens in which we know they did not keep pets. Also, other an
539.
by ang_cire 2y ago
Well, the stereotype of Indian people being good at math specifically was itself a consequence of survivorship bias, that emerged from observing Indian visa holders who were hired based on their skills and credentials, and who were not at a
540.
by ang_cire 2y ago
It's important to distinguish where the biases reside in reality, if you're attempting to simulate it. If I ask a language model, "Are Indian people genetically better at math?" and it says 'yes', it has fail

More ›