borski

41 ms·

631.
by borski 2y ago
VCs will say a lot of things when they are not investing. 99% of what they say is nonsense when not investing, because the real factor is “will it make lots of money?” and/or “can it scale to hundreds of millions of people?” Almost a
632.
by borski 2y ago
Nobody is suggesting you “schit [your] pants.” The point of this isn’t to scare you, but to share information about a new model that predicts new effects. Nobody ever said it was “the most accurate model that exists.” But without even looki
633.
by borski 2y ago
Oh, of course. I was that well-resourced adversary (through the USG) for some time. :) I just mean that if you want to own the market , you will not be able to do that unless you provide something fresh, and it will be a race to the bott
634.
by borski 2y ago
Hang on, please don’t misread what I wrote as implying that Crowdstrike had some “secret sauce.” They suck, so much. I have been beating that drum for the better part of a decade. (My former boss founded Carbon Black, and my background is i
635.
by borski 2y ago
Sure, agreed. That is not the case that is being referred to here, where someone was assigning over IP that they had built while employed by the company but without an explicit agreement about who owns that IP. In this case, $1 or $20 would
636.
by borski 2y ago
The key line there carrying a lot of weight is “…but only if intended for human consumption.” Market it as “for research only” and that law does not apply.
637.
by borski 2y ago
Okay, we’ll just agree to disagree on this one.
638.
by borski 2y ago
From the article: “A 2022 survey of scientists in France, for instance, found that 75% were willing to publish null results they had produced, but only 12.5% were able to do so.”
639.
by borski 2y ago
If you are assigning me some rights or an entire piece of IP, I must provide you with some consideration (monetary compensation) for that to be a valid contract. You cannot simply “gift” it to me. So I would, as part of the contract, hand o
640.
by borski 2y ago
This kind of nit is not worth picking, imho. Jumping off a bridge doesn’t kill you; hitting the ground or water does. But not always. So is jumping off a bridge not the cause of death? Should we say blunt trauma?
641.
by borski 2y ago
While I hear what you’re saying and I agree in general, I think what you’re reading is that in this case the logical jump was fairly obvious with or without the mention of your diagnosis. I have ADHD, and it seemed very obvious to me. Tha
642.
by borski 2y ago
If the overheating happened as a side effect of the acid, and the person had generally never had issues with overheating, it’s a very small jump to say that acid caused it. That said, I’m less convinced that it raises your core body temp en
643.
by borski 2y ago
“Fresh” is the key word. You need to have fresh ideas, and I am certain Wiz doesn’t, as it relates to endpoint security. I agree Crowdstrike sucks. I’ve been beating that drum for the better part of a decade. Building a “new crowdstrike” by
644.
by borski 2y ago
You’re trying to prove a point with no point. Yes, anyone can build anything. There is always room for more contenders when there are existing incumbents. The sky is still blue, and the grass is still green. But it would make no sense for W
645.
by borski 2y ago
It is an entirely different problem with almost nothing in common with their existing product, and there are a ton of incumbents, some of whom are even quite good (Carbon Black, SentinelOne, etc)
646.
by borski 2y ago
It's not a kickback because Cyberstarts is providing 'points' which eventually equate to carry for them as advisors to the startups in the fund, to which they donate their time, expertise, and so on. The implication, you coul
647.
by borski 2y ago
Wiz does not do endpoint security. Different products entirely.
648.
by borski 2y ago
So instead of human matchmakers, next step: AI-arranged marriage?
649.
by borski 2y ago
Yes.
650.
by borski 2y ago
https://1passwordstatic.com/files/security/1password-white-p...
651.
by borski 2y ago
Thank you! That was a super-helpful response. I wasn't asking because I disagreed, but because I didn't fully understand what you were getting at. Now I do. Thanks!
652.
by borski 2y ago
Sure. But most people add “111111” or “123456” to the end. That’s why it’s on top of every password list.
653.
by borski 2y ago
> so your single point of failure is now just ONE password, the consequences of which would be that an attacker would have access to all of your passwords. Most managers have 2FA, or an offline key, to prevent this issue, and encrypt you
654.
by borski 2y ago
Can you be more specific? I’m familiar with Shannon’s work, obviously, but what societal changes happened as a result of engineering the Bell system specifically?
655.
by borski 2y ago
It depends on the vuln and the need. For example, an XSS won’t net you very much, unless the buyer already has a browser RCE but needs a way to deliver it to a target they know uses a particular service or browser, and for that they may nee
656.
by borski 2y ago
You’re missing the point, either intentionally or unintentionally. No matter how many lines of defense in depth you have, protecting the surface area of a product or service is always going to be harder than attacking it.
657.
by borski 2y ago
Old news, and didn’t require AGI: https://en.m.wikipedia.org/wiki/2016_Cyber_Grand_Challenge
658.
by borski 2y ago
That’s not actually fair. Defense is very hard. Offense, by comparison, is much easier. An attacker has to win once, and then they’re in. A defender has to win every time , which is much much harder, if not impossible.
659.
by borski 2y ago
Also, just to be clear - the US gov buys tons of zerodays.
660.
by borski 2y ago
Yes, but you only have to succeed once. They have to succeed every time , which is a much much harder proposition.

More ›