Cyber Security: A pre-war reality check

> Part of this is that nobody has cared about security since the beginning, for basically anything in tech.

> It’s an industry-wide issue that permeates every level of the stack.

Can you explain? I don't understand. Here's my take.

Let's start from the bottom of the stack. CPU has some good security protections. They have ways to ensure that boot code is signed. They have hardware protection for memory. They have memory encryption to isolate VMs. They have many amazing security technologies. I can run VM inaccessible by host.

Let's move to OS. Well, there's lot of security stuff in any OS. Process isolation, namespace isolation, encrypted storage.

Next level is container orchestrator which happens to be Kubernetes these days. Again, there's lots of security stuff there. Built-in and add-ons. Everything is authenticated with cryptography. Many ways to implement very granular secret sharing. Secret stuff is encrypted in-rest.

Next level is application framework. Can't tell for every framework, but all frameworks I've seen so far was quite security-cautious. They try to safeguard known security issues (like SQL injections), they make it easy to add security layers on top, and so on.

Nobody cared about security in 1984, I guess. That's not the case anymore. Everyone cares about security. May be there's still space for improvement.

The only people who don't care about security are end-users. They don't even know what security is. They don't care about their passwords. They don't care about sharing their access. They don't care to check domain before typing password.

Also some application developers don't care much about security, that I admit. But that's not the every level of the stack. That's the last level of the stack.

Do you understand cause and effect, before Romania allied with Germany, guess who was allied with Germany ?

Yes USSR, and guess what happened? Stalin and Hitler had a deal where Ruzzians were given parts of Romania.

https://en.wikipedia.org/wiki/Soviet_occupation_of_Bessarabi...

So here is the impressive Ruzzian logic, show me your mental skills explaining it

USSR collaborates with Hitler and steals Romanian land, This is OK in Ruz logic

later Romania enters the war against the USSR thieves to get the land back, but this in Ruz logic is NOT OK.

So in Ruz logic, only Ruzzia can collaborate with Hitler, and Ruzzia can grab lands but other country is not allowed to recover lands grabbed by Ruzzians.

This is a shit logic, where the distance from A to B is not the same from B to A, it depends if A or B are Ruzzian or not, because Ruzzian logic is always relative to their interests and Satan given rights to them to bring suffering to the world and their own subjects.

Edit: IMO you have 2 choices,

1 keep suck on Putin propaganda that all of Ruzzia;s neighbors are gay, nazi, satanists that hate the straight, democratic, Christian, God Chosen people Rusky

or

2 the hard choce, where you need to do a bit of effort, just be open for new info, ask me about why we entered NATO, try to understand our point of view even if you dissagree, understanding your neighbors (or maybe your enemies, future victims) is important

It’s also in the Russian constitution that Putin basically gets to be president for life. Guess that makes it okay…

Your comment suggests this was some time ago, since traveling to Ukraine after the invasion doesn't seem to be something most people would do.

I have plenty of Ukrainian colleagues, both still in and outside of Ukraine. Opinions differ a lot. There is only this truth:

1. Ukraine is at war

2. Martial Law helps a country at war

It's logical that governments take decisions that some people don't like. Martial Law is there to take quick, hard and possibly unpopular decisions. Ukraine as a country is trying to survive right now. Their martial law doesn't even allow elections!

Is this right?

> the famous Stuxnet operation, where apparently the West was able to disable the ultracentrifuges used to create highly enriched uranium.

> And not only did they disable it, like the factory is down now, it tore itself to shreds physically.

Vs eg Wikipedia talks about the facility losing 10% of centrifuges slowing down the schedule of enrichments. (In https://en.wikipedia.org/wiki/Stuxnet#Natanz_nuclear_facilit...)