Hacker Newsnew | past | comments | ask | show | jobs | submit | ghostbrainalpha's commentslogin

We live in the age of post irony. The definition of what makes something a joke is now based on "amusing vs not amusing".

We no longer define jokes based on "real vs not real".


Sounds like Elizabeth Holmes next project.

That's the definition of a White Hat to me.

If there was a well known company, TrustedExploitAndPatch Inc, that had faces and contact info and dropped an 'oh by the way.txt' file with the details, screen recording, etc. after patching showing they didn't exfil all the coins - would people be happy?

Even if someone finds your wallet and returns it, full of its original cash, they still would have had time to snag your credit card numbers, figure out your address, what coupons you have.

The alternative is a guy in a suit walking up and saying "I saw your wallet in the bushes on 144th and 132nd."


I was involved in the an incident like this, and the intense pressure for public immediate action led to the (firing or resignation) of multiple people who were actually needed for the investigation.

Something that could have been fully analyzed with those people in a couple weeks ending up taking two years with an independent outside auditor.

The independent auditor would have been needed either way, but if we gave the original crew the opportunity to respond, THEN fired them, the outside auditor could have just verified the story much more quickly.


You where involved in the biggest fuckup by orders of magnitude your whole industry ever did in it's existance? I'm interested to hear the story.


StartCom, Symantec, CNNIC, and DigiNotar were bigger. Or do you only count pure incompetence as ‘fuckup’?


They weren't really bigger. Anyone can compromise eMudhra's certs. DigiNotar was hacked by a state-sponsored actor (Iran) and they created a few malicious certs.

The trust was gone and it's good that they closed up shop, don't get me wrong. But it's not like anyone who knows IT could create certificates in their name, in this case the impact is really a lot bigger. Especially to the world as a whole, the DigiNotar issue mainly affected users in Iran.


C'mon now, this isn't even the biggest IT disaster this week.


Im talking about the CA industry. Maybe industry is the wrong word?


> the intense pressure for public immediate action led to the (firing or resignation) of multiple people who were actually needed for the investigation.

That just sounds like a management failure. You don’t actually have to cave.


Exactly. Besides that, firing people on the spot solves nothing and only makes it harder to recover.

The only reason there would be to fire people immediately would be if it would have been done deliberately with malicious intent but in this case there is no evidence of that.


People fired on the spot can't point out risks that were told to management and ignored.

Scape goats work better when they can't defend themselves.


Can’t wait for my AWS region selection dropdown to include "us-pacific-active-magma-1"


So one person single-handedly knocked out 10% of the entire Tor exit network over an SSH port redirection?


10% were compromised. The author contacted the Tor Project's network health team, who "made an announcement to the operators, who began shutting their exit nodes down."


If you are talking about take a screen shot, analyze move the window a bit, take another screenshot, move the window, repeat until they have seen enough of the map to make a decision, then decide what to click on, issue order.... this could absolutely be done. It's very similar to how LLM's have driven a car on a safe track.

But right now the response time would be so slow that the bot would not be close to competitive except with the most low level players. Especially because its hard to click on things that are moving at the same time as well.

Sometime soon, I'd like to see an LLM be competitive using only computer vision, mouse movement, and locked into a human possible number of actions per minute.


Sam Altman helped bring us the future, but you can tell by double layered polo he also has deep connections to the past. To be doing that in 2008.......


I don't know how close you have been following but she did get shut down.

And she had to do a lot to get it permitted and set back up.


I love all these books especially Sam Harris, but from one atheist to another, are you ok? This is a really heavy dose to be doing in one year. And if your fun reads are Cormac... it looks exactly like my reading list when I'm depressed.


If I'm depressed, I'm unaware of it.


Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: