The Insecurity Industry

Post by sumedh » Tue, Jul 27, 2021, 2:47 AM UTC

zarzavat wrote: post #31

dmoy wrote: post #18

Earlier quoted context omitted.

Most of the people I went to Uni with ended up in fields where the companies are liable for bad stuff, to a certain degree. It does exist. However: * you get paid a lot less * the companies and industries move very slowly * you spend a lot more time writing long-form, some time just re-using existing stuff wholesale, and almost no time building actually new things I mean like Real Engineering fields. What we do in so…

Actually it's simpler. People and organizations would just move to a jurisdiction where such liability laws didn't exist. Apple would move. Microsoft would move. Google would move. And then the US would be forced to decide whether to accept imports of foreign devices and software (created under the no-liability framework) or to stay with homegrown technology frozen in time. The best thing you can say about this propo…

Post by d110af5ccf » Tue, Jul 27, 2021, 2:57 AM UTC

jodrellblank wrote: post #78

nyolfen wrote: post #44

Earlier quoted context omitted.

how does linux fare in this scenario? few things are as critical in terms of infrastructure

All the internet backbone routers, endpoint routers and switches, hardware firewalls, VPN concentrators, the SSH daemons, SSL software, RSA keyfobs and the like, the content delivery networks and DNS ecosystem, SSL public trust system, the connectivity providers from ISP networks and national and international fibre connections to cellular and wifi networks, web browsers which billions of people use to interact with…

Post by rvz » Tue, Jul 27, 2021, 3:00 AM UTC

fungiblecog wrote: post #12

Nothing will change

Post by d110af5ccf » Tue, Jul 27, 2021, 3:02 AM UTC

user3939382 wrote: post #25

iamstupidsimple wrote: post #19

Earlier quoted context omitted.

> What we do in software is not real engineering, not even close. The only reason our processes and practices aren't much heavier is because the stakes are lower. People do not die if a Tweet doesn't make it through, but they do if a bridge collapses through. The threat model is also significantly different. If we go back to the bridge analogy, a company like Microsoft has to deal with tens of thousands of people try…

> People do not die if a Tweet doesn't make it through True, and what you're saying is generally true. But what were the total consequences of the Equifax breach? We can't even quantify it. Snowden himself in the article mentions activists and journalists being killed because of these vulnerabilities. There are definitely counterexamples.

Post by ramraj07 » Tue, Jul 27, 2021, 3:05 AM UTC

rognjen wrote: post #82

While his message is undoubtedly important I find his writing style is overly condescending and detracts from the message.