• 20 Posts
  • 1.52K Comments
Joined 2 years ago
cake
Cake day: October 20th, 2023

help-circle

  • You will never have resources to “test absolutely everything”. It is ALWAYS about building out personas and deriving tests from those.

    What this tells us is that one of two things happened:

    1. This was not tested at all
    2. The testing harness resets the environment after every check (e.g. “does process close when killed”) rather than involving a manual reset (i.e. “close and re-open task manager”)

    The latter is a lot more common than you would think since it makes it much easier to automate these harnesses rather than having a human at a VM. But… this is what happens when you don’t step through the entire workflow.


  • That is the reality.

    The problem isn’t “vibe coding” (anyone who has ever managed early career staff will be able to attest that… the bar is REAL fucking low). The problem is a complete lack of testing or any sort of “investment” in caring if production breaks.

    A lot of it is general apathy induced by… gestures around. But it very much goes beyond just the obnoxious rise in brain drains over “vibe coding”. Personally speaking, I am THIS fucking close to driving over to my company’s head of IT’s house and burning it down with him in it (For legal purposes, this is a joke) as that entire team continues to think “We’ll just wait until people tell us what is broken” is at all fucking acceptable.

    But pretty much any SDLC is going to be built around code review. And code review is how you handle developers of different skill and sanity levels. Whether they are old hats who have been in the basement since before you were born, youngins who can’t stop talking about Rust, or chatbots.














  • While I agree with the sentiment, let’s just go down that list:

    • Where he lives: DMV and taxes cover that
    • What he looks like: DMV covers that
    • How many devices are on the network: The vast majority of people have no reason to care about that. Hell. I am not even sure I are about that
    • How many kids he has and their ages: Taxes and social security
    • What times they are home: Their internet usage patterns and likely cell towers logging their sim cards
    • What types of food they have delivered and how often: Traffic cameras and asking uber eats or whatever. Although… this goes back to “how important is this data?”
    • Guest info: See above regarding sim cards

    I 100% agree it is important to be aware of what data a given device/vulnerability has access to. It is ALSO important to figure out if that is actually any new data being available and to think about what orgs/agencies would be a concern.

    Because maybe you DO care about the principle of it (I know I do). But “It is the principle of the matter” is just as ineffective an argument as “I have nothing to hide”.



  • Yeah.

    I can’t speak to Mexico. But, at least in the US, video games very much have been a pipeline for both rehabilitation of the military’s image and direct recruitment. It is what leads to generations that believe tier ninety special force operators are the greatest people ever which both provides “They know what they are doing and have their reasons” and “I want to be one of those”

    I am not aware of any cartel friendly games (unless you REALLY disliked Fifty Cent, I guess?) but I wouldn’t immediately rule this out IF it is part of a wider media push.


    Violent video games do not make you violent. But “cool guys doing cool shit” makes people want to “do cool shit”. There is a reason (para)militaries around the world tend to cooperate with, and outright fund, so much media that glazes them. Hell, military/spy porn is sometimes so good that it makes you ALMOST stop making jokes about how Sullivan Stapleton should play Hank Hill in a live action KOTH (that man wishes he had Hank Hill’s ass).