Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

I'm not burned out, I'm pissed off

myname.website

Post reply on HN
Print view View original

141–150 of 335 posts

Re: I'm not burned out, I'm pissed off

#141

Post by linuxftw »

czechdeveloper wrote: post #112
saiya-jin wrote: post #105

Earlier quoted context omitted.

General curiosity in some topic? I can talk quite a bit about firearms, ammunition etc. yet I never owned a gun, shot altogether maybe 5-8 rounds in my whole life (apart from BB gun). I like watching youtube channels like Demolition ranch or Iraqveteran8888 for their technical expertise, viewpoints and just fun. Without any real expectation to ever own a gun to expand on this knowledge. Maybe some nice bow one day (w…

I could not figure out an argument without sounding too confrontational toward you or OP, so sorry :). But if your knowledge can't fulfill your need in same field, what is that knowledge for, or is that even actual knowledge?

People like to satisfy their curiosity. Think of the average tabloid at a newsstand. It provides some provocative information, but it's the curiosity of the details that drives people to buy them. Is it going to improve their life in any material way? Probably not.

Re: I'm not burned out, I'm pissed off

#142

Post by contingencies »

The problem with the security mindset is that security goals are relative to other business goals within almost every organization. A breach can be OK. A rebuild can be OK. Some downtime can be OK. It depends on the system. To put it eloquently: I don't trust security people to do sane things. - Linus Torvalds (2017) ... via https://github.com/globalcitizen/taoup

Re: I'm not burned out, I'm pissed off

#143

Post by CelestialTeapot »

LeonM wrote: post #139
zer00eyz wrote: post #53

"A new car built by my company leaves somewhere traveling at 60 mph. The rear differential locks up. The car crashes and burns with everyone trapped inside. Now, should we initiate a recall? Take the number of vehicles in the field, A, multiply by the probable rate of failure, B, multiply by the average out-of-court settlement, C. A times B times C equals X. If X is less than the cost of a recall, we don't do one." N…

For those who didn't get the reference: The OP is quoting Tyler Durden, a fictional character of the movie 'fight club'. So take it with a grain of salt.

That is indeed fictional, but the real world Ford Pinto that was based on is real [1].

1. https://www.tortmuseum.org/ford-pinto/

Re: I'm not burned out, I'm pissed off

#144

Post by wrayjustin »

LeonM wrote: post #139
zer00eyz wrote: post #53

"A new car built by my company leaves somewhere traveling at 60 mph. The rear differential locks up. The car crashes and burns with everyone trapped inside. Now, should we initiate a recall? Take the number of vehicles in the field, A, multiply by the probable rate of failure, B, multiply by the average out-of-court settlement, C. A times B times C equals X. If X is less than the cost of a recall, we don't do one." N…

For those who didn't get the reference: The OP is quoting Tyler Durden, a fictional character of the movie 'fight club'. So take it with a grain of salt.

Or, take it for what it is, a quote from a movie.

But don't dismiss the merits of the idea. It's essential Risk Management[0], which is most certainly a relevant part of Information Security. Specifically, this is a form of Cost-Benefit Analysis (specifically, Qunatativie Risk Analysis[1]), a critical component in proper Risk Management; the reality is you cannot "fix" every issue.

Take a look at methods like Single Loss Expectancy[2] and Annualized Loss Expectancy[3]; you'll find that the Fight Club quote is very close to the real-world methodology. I cannot speak for the Automobile Insurance industry, but given Insurance is founded in Risk Management, it seems likely to be closer to reality than not.

[0] https://en.wikipedia.org/wiki/Risk_management

[1] https://csrc.nist.gov/csrc/media/publications/conference-pap...

[2] https://en.wikipedia.org/wiki/Single-loss_expectancy

[3] https://en.wikipedia.org/wiki/Annualized_loss_expectancy

Re: I'm not burned out, I'm pissed off

#146

Post by tempguy9999 »

rat9988 wrote: post #132
tempguy9999 wrote: post #103

Earlier quoted context omitted.

That's very civil of you, upvoted. OK, now I can answer. It's all a balance of investment, payback (which can be direct - "gets me a job" - and nebulous life-quality stuff - "that's interesting!") and erm, my lifespan. I try to make those tradeoffs consciously. If I decide x is valuable but boring, these days I'll measure it against other priorities, if it wins I force myself to do it. So I try. It's an acquired skil…

What you call an acquired skill is a heuristic most people do unconsciously.

People always do the right thing and don't dither, don't procrastinate, always evaluate the long term consequences? Sure they do.

Re: I'm not burned out, I'm pissed off

#147

Post by beerandt »

raducu wrote: post #25
Simon321 wrote: post #18

If you work in security, this resonates so much. No one really cares about security except to check a box or pay lip service to it. That's why so called security products ship without logging and clients don't want to make the smallest effort to enable you to improve their security. It's why companies that sell security products invest more in marketing than the product. The industry is full of conmen and marketeers.…

I work as a contractor for a bank. A few months ago everybody was up in arms about a "major" security issue discovered by an auditor (you could see the settings of random users by changing an id in a url). I've just shown them you can credit money to your account, yet this is low priority and they provided a fix that I'm 100% percent sure didn't fix anything, unfortunately the functionality is down on all but the pro…

Never to yourself. Maybe to a board member. Or all of the board members. But that's a big maybe.

And make sure your contract covers your ass, under production system testing / penetration, or something similar.

Re: I'm not burned out, I'm pissed off

#148

Post by shifto »

varjag wrote: post #79
shifto wrote: post #57

Earlier quoted context omitted.

As well as cutting 98% of your workforce as no office employee knows how to work on anything different.

Most of the workforce would have little trouble working on Macs or using Office365. The actual friction will come from Windows sysadmins with no other practical skills.

I agree with the sentiment but this is probably not the case as a sysadmin hardly has any say in this usually. (I've been a sysadmin at software companies for 10 years.)

Re: I'm not burned out, I'm pissed off

#149

Post by beerandt »

2rsf wrote: post #121
zer00eyz wrote: post #53

"A new car built by my company leaves somewhere traveling at 60 mph. The rear differential locks up. The car crashes and burns with everyone trapped inside. Now, should we initiate a recall? Take the number of vehicles in the field, A, multiply by the probable rate of failure, B, multiply by the average out-of-court settlement, C. A times B times C equals X. If X is less than the cost of a recall, we don't do one." N…

> If X is less than the cost of a recall, we don't do one. We didn't take into account loss of sales and reputation, the equation is not (should not) be that simple

It's a movie quote.

Re: I'm not burned out, I'm pissed off

#150

Post by austincheney »

Simon321 wrote: post #18

If you work in security, this resonates so much. No one really cares about security except to check a box or pay lip service to it. That's why so called security products ship without logging and clients don't want to make the smallest effort to enable you to improve their security. It's why companies that sell security products invest more in marketing than the product. The industry is full of conmen and marketeers.…

That sentiment reminds me of how most people think of accessibility.
Post reply on HN