421–430 of 466 posts
Oh, I see that you're cunts. Well that's your choice. My choice, in response, then, is to notify certain corners of the dark web how you approach security. I'm sure they'll find something else, and don't worry - they won't bother you with a disclosure.
Earlier quoted context omitted.
I read that post as him talking about their company, in the sense of the company they were working for. If that was the case, then an exploit of an unfixed security issue could very much affect them either just as part of the company if the fallout is enough to massively harm business, or specifically if they had not properly documented their concerns so “we didn't know” could be the excuse from above and they could…
No i mean, 'a company you own'. At the end of the day you're just a worker getting paid to produce output. cross your I's and dot your T's and whatever else and then clock out.
I'm lucky, I have options¹ and it is looking like I don't need them²³, but many are not so lucky.
--------
[1] I made serious enquiries about a couple of them when the recent take-over was announced, just in case…
[2] the new corporate masters seem to be doing more than talking the talk, and on quality matters we were already doing things right and the new overlords don't appear to have any desire to change that
[3] well, at least not on these matters, there are a few cultural changes that I need to get used to or get away from, largely due to being a bigger organisation now, but they aren't wrong just a little further from my preference than things were before.
Earlier quoted context omitted.
> You don't need to retrieve other people's data to demonstrate the vulnerability. If you’re reporting to a nontechnical team…which sometimes you are…sometimes you do?
Absolutely not. That's not your concern nor your problem. They're perfectly capable of hiring incident response experts, and companies commonly have cyber insurance that'll pay for it. "Demonstrating" is dumb and means you turn an ordinary disclosure into personal liability for you . Blabbing about it on the internet is just the idiot cherry on the stupid cake.
Agree otherwise.
In the stories I’ve carefully read, no proof means being ignored by frontline people who are all you can reach,
turning an ordinary disclosure into no disclosure at all.
Earlier quoted context omitted.
If his goal was to keep the data he wouldn't have reported it?
That doesnt necessarily track. He could have stolen the data, then reported it to clear his own name. He did access more data than he needed to prove that there is a likely breach.
Earlier quoted context omitted.
That is the thing software can kill, or destroy lives in presence of bugs. Again, sign any legal documents as engineer, and a court visit might turn into reality.
If Oracle, IBM or Microsoft after 50 years, and employing thousands of Software Engineers ...include the standard disclaimers on their Software, I dont think those in title only should make much fuss of the Software Engineer badge...
Thankfully stuff like Crowdstrike and Cloudflare are making governments pay attention to industry losses caused by malpractice.
Earlier quoted context omitted.
There are engineers, and there are brick layers. You mean Android's great quality, or Chrome CVEs by the way?
Just because you have an engineering degree doesn't mean your code is of better quality and security than someone without an engineering degree. Signed, someone with an CS engineering degree.
Earlier quoted context omitted.
Professional labour value isn't synonymous with late stage capitalism without ethics or morals. Now if you mean for own much one is willing to sell themselves to late stage capitalism, producing low quality products and entshtification, maybe that is the bang for buck right there.
>Now if you mean for own much one is willing to sell themselves to late stage capitalism The government is the one selling you out to late stage capitalism through rampant inflation, business and fiscal regulations and deregulation, offshoring, and various nefarious policies on housing and labor migration. People just adapt to survive by taking the best paying jobs, since voting clearly doesn't help them. Don't tell…
Quality of life and health matters more than anything else.
After a certain point, more money doesn't bring any of that, one is not taking the money into the grave, other than build a mausoleum.
Earlier quoted context omitted.
Interesting that perplexity takes a random Redditor comment as fact...
yeah, so many software engineers are not verify "ai search results". Hey people, llm generated search results aren't reliable, might well have hallucinations. You have to verify anything they say.