Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Incident Report: CVE-2024-YIKES

nesbitt.io

Post reply on HN
Print view View original

31–40 of 187 posts

Re: Incident Report: CVE-2024-YIKES

#32

Post by cassianoleal »

david_shaw wrote: post #27
saint_yossarian wrote: post #23

Earlier quoted context omitted.

> But for a long time (and maybe even still), a hacker creed was "move fast and break things." Was it? I thought Zuckerberg coined this horrible phrase.

He certainly popularized it (maybe coined it), but I've seen a lot of organizations and developers repeat that mantra. Even without the specific words, look to product teams debating tradeoffs of going to market vs. waiting for better security controls. They're pushing for faster product release every time, at pretty much every org.

In any case, not really a hacker's creed. This has always been withinin the realm of corporations, especially Silicon Valley or adjacent.

Re: Incident Report: CVE-2024-YIKES

#35

Post by pixl97 »

nikanj wrote: post #11

Customers give us heat for not shipping the latest vulpine-lz4. Their AI-based heuristic antivirus total defence solution automatically flags all software not running latest versions of everything Kindly advice

Ya, latest is a mess. I don't care about latest, I want the version with no known security flaws.

Re: Incident Report: CVE-2024-YIKES

#36

Post by asah »

cassianoleal wrote: post #32
david_shaw wrote: post #27

Earlier quoted context omitted.

He certainly popularized it (maybe coined it), but I've seen a lot of organizations and developers repeat that mantra. Even without the specific words, look to product teams debating tradeoffs of going to market vs. waiting for better security controls. They're pushing for faster product release every time, at pretty much every org.

In any case, not really a hacker's creed. This has always been withinin the realm of corporations, especially Silicon Valley or adjacent.

MFABT is about survival. Don't hate the player, hate the game.

Re: Incident Report: CVE-2024-YIKES

#38

Post by yieldcrv »

> unrelated security researcher publishes a blog post titled “I found a supply chain attack and reported it to all the wrong people.”

ahahaha like that fiverr cloudinary bucket leak that turned out to just be a UX issue, this has me rolling

Post reply on HN