Yes. I know. I currently have the (questionable) pleasure of being in charge of IT security for such a company. What really ticks me off is when people get detailed information on what security flaws exist and they "fix" it in a way that betrays that they don't even remotely try to understand the underlying issue. Look, I don't even expect a web developer anymore to know what a HSTS header is. But that they can't even be assed to at least take a look at what it is when the pentesting team pretty much rubs their nose in it really pisses me off.
As an example from a few years ago, the test reported a missing HSTS header. One should assume that it's an easy fix (provided that the certificates are ok, which they are). What did the geniuses do? Set a HSTS Header with a max-age of 0, of course. I have rarely seen a more blatant example of tick-box fixing than that. They very, very obviously did not even attempt to understand just what that effin' header is here for. The train of thought was very obviously a) Header is missing, b) we set the header somehow, preferably in a way that doesn't require me to test it (I still presume ignorance. It IS the lesser crime) c) I can close the fucking ticket.
THIS pisses me off. I don't even expect programmers anymore to know shit about security. Even after weekly training courses. But what I still DO expect them is to think when implementing something. Else I can get cheaper code monkeys from India.
Most likely this has nothing to do with network connectivity issues. The malware took very great care to be invisible unless activated, and the server where the second payload should have come from has been down since at least November 2018. In other words, anything happening to you for the last 2 weeks is most likely not due to this.
Yes, but we designed RAD tools that convinced even the most illiterate dumbass that he can write code. Everyone can copy/paste from stackexchange and that's what doubles as "coding" today.
I call it "total job security". Yes, I'm in IT security.
The American education system failed because it teaches the wrong things. What is being pushed is rote-learning and regurgitation. You're not only not required to think for yourself, actually questioning and demanding further proof is frowned upon because (elementary) teachers are usually no smarter than the book they have at their disposal and are more interested in instilling their pupils with the idea that following authority is a wanted trait and questioning is anathema.
Since they also don't teach how to discriminate between information and bullshit (well, if people could, religion wouldn't be a thing anymore), what happens when people do actually start to "question authority" is about the worst that could happen. Because they don't question authority, they reject it. And since all they ever learned was to believe what they are told, their train of thought is "I don't want A to be true, so I will believe B instead". And without the ability to tell information from bullshit, they basically have no way to tell when they're being told bullshit and will believe it. Because it's not what "teh man" tells them, so it must be true.
Flu vaccines and MRR vaccines are two very, very different beasts.
Flu vaccines are a race against the clock. You have to understand that the development of a vaccine isn't something you do in a couple hours. We're talking a lead time of many months, sometimes up to a year. With a fast mutating virus like the flu virus, this is an eternity. There is even a good chance that the vaccine you eventually have isn't very potent against the virus you're dealing with the next year anymore because your predictions and projected mutations were wrong. Plus, testing is something you also do in a hurry. You'll hence notice that all the scare stories you get to hear about are from Flu shots that went wrong somehow. And you'll also notice that recommendations to get Flu vaccinations usually only come when there is already an outbreak with some serious lasting effects somewhere else and there is a good chance that it's gonna jump the border soon. Exactly because Flu shots can be a risk.
MRR is a vaccine that doesn't change much. You're looking at a vaccine that has been developed about half a century ago, pretty much any side effects that could somehow possibly happen would have happened by now. We do know the possible side effects pretty well and we also know what to look for to detect them early and how to deal with them.
Vaccines are a matter of statistics. How likely is an infection? How likely are lasting negative effects of an infection? How likely are lasting negative effects of a vaccination? And for MRR, the statistics for this is clearly on the side of getting it. For Flu shots, less so. And for, say, malaria it would be insane to get vaccinated if you don't plan to leave Michigan in the foreseeable future.
You might want to go into detail, considering that it would be trivial to point out the good they've done the world over. I'm fairly sure you never saw a smallpox or polio victim. And you're used to your kids surviving to adulthood. Take a wild guess why.
To quote a comedian, I could say it nicer that it's bullshit... but I don't know why I should, it doesn't become any less of a pile of bullshit that way.
Scientistic faith? What's scientistic, by the way, apparently it's not just me that doesn't think it's a word, Chrome autocorrect sides with me here...
Science needs no faith. Science can demonstrate that what it claims is true. If you want to deal with faith, find a church.
Well, mostly because death rates were relatively low compared to other reasons why kids died in those days. Polio was feared because an infection was likely where it was common and the effects were in most cases lasting and often permanent. Complications from measles are like 1 in 1000, back then this was a risk you had to take in life and, well, some didn't come out alive.
We're not anymore in a time when losing one of the 3 kids you have before they turn 18 was normal, though. Trust me, people would cry bloody murder if measles were still rampart like they were 100 years ago and killed about one in 3000 infected.
Well, it takes away an incentive from people to start such sky-is-falling bullshit campaigns. Quacks and con artists of all times knew that it's easiest to part a fool from his money, not a person with a hint of knowledge.
A broken watch is right twice a day. It's still useless as a time keeping device. Likewise, just because one of the thousands of conspiracy theories somehow managed to actually describe something that was true isn't a good idea to just go and believe them all.
It's like prophecies. If I spout utter nonsense 24/7, I am bound to be right at some point in time. Does that mean you should listen to me as the great harbinger of truth?
Slashdot Mirror
Ramen, brother!
I can see floods. I can see ice bergs melt. I can't see gods.
Yes. I know. I currently have the (questionable) pleasure of being in charge of IT security for such a company. What really ticks me off is when people get detailed information on what security flaws exist and they "fix" it in a way that betrays that they don't even remotely try to understand the underlying issue. Look, I don't even expect a web developer anymore to know what a HSTS header is. But that they can't even be assed to at least take a look at what it is when the pentesting team pretty much rubs their nose in it really pisses me off.
As an example from a few years ago, the test reported a missing HSTS header. One should assume that it's an easy fix (provided that the certificates are ok, which they are). What did the geniuses do? Set a HSTS Header with a max-age of 0, of course. I have rarely seen a more blatant example of tick-box fixing than that. They very, very obviously did not even attempt to understand just what that effin' header is here for. The train of thought was very obviously a) Header is missing, b) we set the header somehow, preferably in a way that doesn't require me to test it (I still presume ignorance. It IS the lesser crime) c) I can close the fucking ticket.
THIS pisses me off. I don't even expect programmers anymore to know shit about security. Even after weekly training courses. But what I still DO expect them is to think when implementing something. Else I can get cheaper code monkeys from India.
Most likely this has nothing to do with network connectivity issues. The malware took very great care to be invisible unless activated, and the server where the second payload should have come from has been down since at least November 2018. In other words, anything happening to you for the last 2 weeks is most likely not due to this.
And ... you think you get the flu if you don't get one this year because you got one the last year?
I am positive that you can and will provide us with a company that has a better security record where we should get our hardware instead from now on.
Right?
Well, if he's dumb enough to not know how to block the ad, he might be dumb enough to actually buy that shit, too.
If we update through MS Update, how do we get the telemetry from your computer?
Yes, but we designed RAD tools that convinced even the most illiterate dumbass that he can write code. Everyone can copy/paste from stackexchange and that's what doubles as "coding" today.
I call it "total job security". Yes, I'm in IT security.
The American education system failed because it teaches the wrong things. What is being pushed is rote-learning and regurgitation. You're not only not required to think for yourself, actually questioning and demanding further proof is frowned upon because (elementary) teachers are usually no smarter than the book they have at their disposal and are more interested in instilling their pupils with the idea that following authority is a wanted trait and questioning is anathema.
Since they also don't teach how to discriminate between information and bullshit (well, if people could, religion wouldn't be a thing anymore), what happens when people do actually start to "question authority" is about the worst that could happen. Because they don't question authority, they reject it. And since all they ever learned was to believe what they are told, their train of thought is "I don't want A to be true, so I will believe B instead". And without the ability to tell information from bullshit, they basically have no way to tell when they're being told bullshit and will believe it. Because it's not what "teh man" tells them, so it must be true.
Then again, it wouldn't hurt either because people who don't check sources also believe any kind of bullshit you put in front of them.
And there ain't even a vaccine against them.
Flu vaccines and MRR vaccines are two very, very different beasts.
Flu vaccines are a race against the clock. You have to understand that the development of a vaccine isn't something you do in a couple hours. We're talking a lead time of many months, sometimes up to a year. With a fast mutating virus like the flu virus, this is an eternity. There is even a good chance that the vaccine you eventually have isn't very potent against the virus you're dealing with the next year anymore because your predictions and projected mutations were wrong. Plus, testing is something you also do in a hurry. You'll hence notice that all the scare stories you get to hear about are from Flu shots that went wrong somehow. And you'll also notice that recommendations to get Flu vaccinations usually only come when there is already an outbreak with some serious lasting effects somewhere else and there is a good chance that it's gonna jump the border soon. Exactly because Flu shots can be a risk.
MRR is a vaccine that doesn't change much. You're looking at a vaccine that has been developed about half a century ago, pretty much any side effects that could somehow possibly happen would have happened by now. We do know the possible side effects pretty well and we also know what to look for to detect them early and how to deal with them.
Vaccines are a matter of statistics. How likely is an infection? How likely are lasting negative effects of an infection? How likely are lasting negative effects of a vaccination? And for MRR, the statistics for this is clearly on the side of getting it. For Flu shots, less so. And for, say, malaria it would be insane to get vaccinated if you don't plan to leave Michigan in the foreseeable future.
Sorry, we replaced evolution with civilization and would try to save their dying spawn. With my tax money, too.
You might want to go into detail, considering that it would be trivial to point out the good they've done the world over. I'm fairly sure you never saw a smallpox or polio victim. And you're used to your kids surviving to adulthood. Take a wild guess why.
Win what exactly? Dying of measles?
Yeah. That's ... great I guess?
To quote a comedian, I could say it nicer that it's bullshit ... but I don't know why I should, it doesn't become any less of a pile of bullshit that way.
Scientistic faith? What's scientistic, by the way, apparently it's not just me that doesn't think it's a word, Chrome autocorrect sides with me here...
Science needs no faith. Science can demonstrate that what it claims is true. If you want to deal with faith, find a church.
Can you point to a reputable source that claimed it was?
No, I do not believe in science. Science is capable of proving what it brings to the table, no faith necessary.
Well, mostly because death rates were relatively low compared to other reasons why kids died in those days. Polio was feared because an infection was likely where it was common and the effects were in most cases lasting and often permanent. Complications from measles are like 1 in 1000, back then this was a risk you had to take in life and, well, some didn't come out alive.
We're not anymore in a time when losing one of the 3 kids you have before they turn 18 was normal, though. Trust me, people would cry bloody murder if measles were still rampart like they were 100 years ago and killed about one in 3000 infected.
A fetus is basically a parasite that lives inside a female host.
If they want to be misguided, let them stick with religion or similar nonsense. At least it doesn't endanger anyone else's children.
Well, it takes away an incentive from people to start such sky-is-falling bullshit campaigns. Quacks and con artists of all times knew that it's easiest to part a fool from his money, not a person with a hint of knowledge.
They'll have to find a new con job, I guess.
A broken watch is right twice a day. It's still useless as a time keeping device. Likewise, just because one of the thousands of conspiracy theories somehow managed to actually describe something that was true isn't a good idea to just go and believe them all.
It's like prophecies. If I spout utter nonsense 24/7, I am bound to be right at some point in time. Does that mean you should listen to me as the great harbinger of truth?