Notices by tehfishman (tehfishman@ioc.exchange)

RE: https://infosec.exchange/@ryanc/117435340454550782

I am once again asserting that "software engineering" is a field undeserving of the title of "engineering"

Imagine if an engineer for a bridge-building project didn't know where concrete came from, or that it has a curing time. "yeah just fuckin pour it in the river with some steel beams in it, i'm sure it'll be fine"

@cR0w @cyberquixote I'm reminded of two things, reinforced by the double whammy of kiteworks and Citrix 0-days I've handled this weekend.

1) software engineering fields as a whole are not deserving of the name. My title is security engineer and the standards in this field absolutely do not meet the standards of quality in other engineering fields that actually have consequences.

2) when I was a wee lad entering this field nearly 20 ago, I genuinely thought that the field gave a shit and that government regulation wasn't actually necessary. After all, who wants to deal with the PR consequences of a data breach? Obviously that's not true because it turns out there are no PR consequences when everything sucks all of the time.

3) pass the bong

@GossiTheDog @snkhan @chronovore Yeah I agree that's how they're making it sound. But that could be because they're incompetent.

@snkhan @chronovore @GossiTheDog _very_ hypothetically: it could be a supply chain attack. The systems could already be compromised, and there's a script waiting in a cron job to execute. That would explain the time window, and why they're saying there's no "vulnerability"

A cat meowing at a bucket of corn

#CatsOfMastodon #CaturdayEveryday #CatLovers #CatsOfTheFediverse #CatContent #FediCats #FelineFriday

@prettygood I think it might be one of the days of all time, even

@prettygood today is a day

@prettygood first one, then the other.

@prettygood sounds like maybe some troll is mad about being defederated

@cR0w @darfplatypus
introducing imposter syndrome, where you get to know things but still feel like a sack of hammers is better at computers

@soatok @mkj obviously not your job, but IMO valid responses include `lmao get loved loser get absolutely fucking treasured`

@rootsandcalluses My back yard smells like strawberry right now and I've had strawberry snacks for days. Best ground cover.

@prettygood a rumble that threatened to be a huge dump but was just a wimpy toot

@prettygood fwiw I haven't seen anything from them "organically" in months, but there are a few accounts over there that are active if I go to the profile pages directly. Seems like one of their main people stopped posting entirely in January

@da_667 the next Resident Evil should really take place on a mega cruise ship.

@soatok worse than Elon's clubhouse?

@catsalad so I actually have a firewall maintenance window tonight in which I push to prod and it turns out that Palo Alto is also pushing to prod AT THE SAME TIME

@prettygood that cannot possibly be a real human

@prettygood
*actual borgmatic documentation*

@prettygood I literally just started using it a few days ago and there's definitely a "we thought about including batteries but decided not to" vibe in the documentation.