Why YC went to DC

Post by nurple » Tue, Jun 04, 2024, 4:00 AM UTC

sillysaurusx wrote: post #186

nurple wrote: post #156

Earlier quoted context omitted.

Here here. The only thing SOC2 has done in my opinion is to create a multibillion dollar business that mainly just drains resources from companies that may not have them, with no guarantees you're actually secure. This usually devolves into security theatre where the CISO and underlings are putting in tools that drown teams with so much noise it's hard to detect the signal. The people running these programs rarely un…

(It’s "hear hear," since you want people to hear it. Honestly I have no idea whether to say something or not. But I’d want to know, so, just in case it’s helpful.)

Post by bandrami » Tue, Jun 04, 2024, 4:13 AM UTC

stackskipton wrote: post #125

jacobr1 wrote: post #83

Earlier quoted context omitted.

They are goldmine of enumerated attack surface. But it would likely require some kind of secondary exploit of the identified vulns. The API connections are generally scoped to read-only access of security settings. Though it wouldn't surprise me if there was some way to get lateral movement from the access these tools have to monitor an environment.

At $LastCompany, someone gave them Contributor (Create/Read/Update/Delete) access to Azure because it was easier than scoping to 5 roles they required. I wouldn't be shocked if we were not only ones. Edit: Their software should really check and refuse to work if someone does that but obviously Vanta doesn't care. They can begin scanning and billing.

Post by kemitchell » Tue, Jun 04, 2024, 4:18 AM UTC

AlbertCory wrote: post #187

This article is light on organizational and financial details. You don't just go to DC once, have some meetings, and announce what has to be done, if you're serious. You open a permanent office, meet with people on the Hill regularly, and spread campaign contributions around liberally. DC is crawling with people whose life it is to help you do that. Just drive around Chevy Chase and see all the luxury shops catering…

Post by raincole » Tue, Jun 04, 2024, 4:24 AM UTC

probably_wrong wrote: post #42

Apologies for the negative tone: > First, let’s prioritize open source models and more tailored AI applications to shape the competitive landscape and create real opportunities for startups. How does YC square this statement with the fact that their ex-president closed their models with the explicit intention of slowing down competitors [1]? Or is the argument "we want politicians to discourage people like us from do…

Post by tsimionescu » Tue, Jun 04, 2024, 4:30 AM UTC

robertlagrant wrote: post #215

luma wrote: post #101

Why should healthcare be tied to employment? "Quit fucking around" and institute a national, single-payer plan that covers everyone, like every other modern industrialized country.

> institute a national, single-payer plan that covers everyone, like every other modern industrialized country The two (real, non-politicians are corrupt) downsides to contend with: - countries do this by limiting what they will spend; in the US you have access to unlimited treatment. E.g. in the UK the NHS will spend £30k for each good year it buys you - this one isn't fair, but the US is where health innovation hap…