<![CDATA[It's amazing how fast attitudes to security in the industry has changed.]]>It's amazing how fast attitudes to security in the industry has changed. Like, I remember in 2023ish spending a while working on a system to securely trigger remote builds, because we couldn't have our slack chatbots on the same network as our Jenkins server

And in 2026 they just give a 3rd party LLM write access to both + the git repo

]]>https://board.circlewithadot.net/topic/4543d647-2cdd-4be9-8262-e5ae2099d18e/it-s-amazing-how-fast-attitudes-to-security-in-the-industry-has-changed.RSS for NodeMon, 25 May 2026 08:20:41 GMTTue, 28 Apr 2026 22:01:30 GMT60<![CDATA[Reply to It's amazing how fast attitudes to security in the industry has changed. on Wed, 29 Apr 2026 08:18:43 GMT]]>@Jenetrix@shrimp.creatures.club @foone@digipres.club

it is kind of amazing how chill the industry is with giving models designed to generate and run unauditable code based on arbitrary unsanitized user input access to… well anything, really

]]>https://board.circlewithadot.net/post/https://app.wafrn.net/fediverse/post/536394ed-14ce-4db1-8635-d919cc31f58chttps://board.circlewithadot.net/post/https://app.wafrn.net/fediverse/post/536394ed-14ce-4db1-8635-d919cc31f58cWed, 29 Apr 2026 08:18:43 GMT<![CDATA[Reply to It's amazing how fast attitudes to security in the industry has changed. on Wed, 29 Apr 2026 07:53:52 GMT]]>@Jenetrix nice!

]]>https://board.circlewithadot.net/post/https://digipres.club/users/foone/statuses/116486912910844490https://board.circlewithadot.net/post/https://digipres.club/users/foone/statuses/116486912910844490Wed, 29 Apr 2026 07:53:52 GMT<![CDATA[Reply to It's amazing how fast attitudes to security in the industry has changed. on Wed, 29 Apr 2026 07:47:53 GMT]]>@foone Alice Averlong, Authorized and Certified Gender Technician.
Link Preview Image
]]>https://board.circlewithadot.net/post/https://shrimp.creatures.club/notes/alnbh9vl5df0759jhttps://board.circlewithadot.net/post/https://shrimp.creatures.club/notes/alnbh9vl5df0759jWed, 29 Apr 2026 07:47:53 GMT<![CDATA[Reply to It's amazing how fast attitudes to security in the industry has changed. on Wed, 29 Apr 2026 07:47:11 GMT]]>@foone@digipres.club at this point i just laugh at the absurdity of it all, companies basically scrambling to put the world's most trusting doorman in front of all their sensitive tech and all you need now is a "pwetty pwease ​​"

]]>https://board.circlewithadot.net/post/https://fedi.fraw.st/notes/alnbgdkupodx0005https://board.circlewithadot.net/post/https://fedi.fraw.st/notes/alnbgdkupodx0005Wed, 29 Apr 2026 07:47:11 GMT<![CDATA[Reply to It's amazing how fast attitudes to security in the industry has changed. on Wed, 29 Apr 2026 07:26:59 GMT]]>@foone …sorry, it just hit me that they've done *three* of them now. Cryptonomicon, Snow Crash, The Diamond Age: crypto, metaverse, AI.

Why is our society run by people who think the Torment Nexus sounds neat?

]]>https://board.circlewithadot.net/post/https://plush.city/users/pandabutter/statuses/116486807177505362https://board.circlewithadot.net/post/https://plush.city/users/pandabutter/statuses/116486807177505362Wed, 29 Apr 2026 07:26:59 GMT<![CDATA[Reply to It's amazing how fast attitudes to security in the industry has changed. on Wed, 29 Apr 2026 07:23:34 GMT]]>@foone thankfully, we all agree that it would be a terrible idea to make anything from Neil Stephenson books real.

…right?

]]>https://board.circlewithadot.net/post/https://plush.city/users/pandabutter/statuses/116486793773023863https://board.circlewithadot.net/post/https://plush.city/users/pandabutter/statuses/116486793773023863Wed, 29 Apr 2026 07:23:34 GMT<![CDATA[Reply to It's amazing how fast attitudes to security in the industry has changed. on Wed, 29 Apr 2026 05:48:33 GMT]]>@Tijn @foone I don’t like the data that’s emerging, though.

]]>https://board.circlewithadot.net/post/https://toot.community/users/slotos/statuses/116486420121093688https://board.circlewithadot.net/post/https://toot.community/users/slotos/statuses/116486420121093688Wed, 29 Apr 2026 05:48:33 GMT<![CDATA[Reply to It's amazing how fast attitudes to security in the industry has changed. on Wed, 29 Apr 2026 05:24:47 GMT]]>@zlatko @foone Well, that is fairly obvious. But I don't know if you've ever done government work, but the data is far more valuable. And if you have a breach of classified data...you're done. You're toast.

]]>https://board.circlewithadot.net/post/https://mstdn.social/users/praetor/statuses/116486326709726895https://board.circlewithadot.net/post/https://mstdn.social/users/praetor/statuses/116486326709726895Wed, 29 Apr 2026 05:24:47 GMT<![CDATA[Reply to It's amazing how fast attitudes to security in the industry has changed. on Wed, 29 Apr 2026 05:18:41 GMT]]>@praetor @foone oh the reason is probably not that unknown. They want your money.

]]>https://board.circlewithadot.net/post/https://social.zlatko.dev/users/zlatko/statuses/01KQBTSNRJESB6WG9Y2KCGC35Whttps://board.circlewithadot.net/post/https://social.zlatko.dev/users/zlatko/statuses/01KQBTSNRJESB6WG9Y2KCGC35WWed, 29 Apr 2026 05:18:41 GMT<![CDATA[Reply to It's amazing how fast attitudes to security in the industry has changed. on Wed, 29 Apr 2026 03:56:27 GMT]]>@foone the ai companies present it all as a neck or nothing kind of thing. And that horrifies me. I used to be the CTO for a federal contractor. We did facilities management. And I could never imagine a fairly independent program having access to say our contracts, some of which were for classified projects. If you were an OpenAI sales rep and proposed that to me, you would be escorted out of my office. But people are doing it!!! For some goddammed unknown reason.

]]>https://board.circlewithadot.net/post/https://mstdn.social/users/praetor/statuses/116485979346869594https://board.circlewithadot.net/post/https://mstdn.social/users/praetor/statuses/116485979346869594Wed, 29 Apr 2026 03:56:27 GMT<![CDATA[Reply to It's amazing how fast attitudes to security in the industry has changed. on Wed, 29 Apr 2026 03:24:31 GMT]]>@foone Just like a lot of other stuff, once they didn't have to make an effort to care they immediately stopped.

]]>https://board.circlewithadot.net/post/https://masto.hackers.town/users/drwho/statuses/116485853796917948https://board.circlewithadot.net/post/https://masto.hackers.town/users/drwho/statuses/116485853796917948Wed, 29 Apr 2026 03:24:31 GMT<![CDATA[Reply to It's amazing how fast attitudes to security in the industry has changed. on Wed, 29 Apr 2026 02:54:02 GMT]]>@wtrmt @foone

]]>https://board.circlewithadot.net/post/https://mastodon.social/ap/users/116478659276869694/statuses/116485733909741003https://board.circlewithadot.net/post/https://mastodon.social/ap/users/116478659276869694/statuses/116485733909741003Wed, 29 Apr 2026 02:54:02 GMT<![CDATA[Reply to It's amazing how fast attitudes to security in the industry has changed. on Wed, 29 Apr 2026 01:31:44 GMT]]>@foone people stopped caring. this is what 'work alienation' does to 'the work'. it removes the craft, the skill. workers are swapped out like Legos before they become invested in the work, before they become expensive.

the quality stops mattering, because the company will stop existing in 5 years, when guarantees turn into lawsuits.

funds are received to start projects, but every one leaves before the finish. no one is responsible. no one cares.

]]>https://board.circlewithadot.net/post/https://mastodon.social/users/Sassinake/statuses/116485410301289575https://board.circlewithadot.net/post/https://mastodon.social/users/Sassinake/statuses/116485410301289575Wed, 29 Apr 2026 01:31:44 GMT<![CDATA[Reply to It's amazing how fast attitudes to security in the industry has changed. on Tue, 28 Apr 2026 23:33:26 GMT]]>@foone How long until I can find sensitive government & corporate computers exposed to the Internet by wardialing again? Maybe malicious actors can start asking company chatbots to open telnet ports.

]]>https://board.circlewithadot.net/post/https://furry.engineer/users/jackemled/statuses/116484945103862632https://board.circlewithadot.net/post/https://furry.engineer/users/jackemled/statuses/116484945103862632Tue, 28 Apr 2026 23:33:26 GMT<![CDATA[Reply to It's amazing how fast attitudes to security in the industry has changed. on Tue, 28 Apr 2026 23:25:37 GMT]]>@foone but on the other hand the regulators still haven't read the correct horse battery staple XKCD cartoon and still demand stupid passwords that everyone forgets.

]]>https://board.circlewithadot.net/post/https://pdx.social/users/mossyfoot/statuses/116484914395168567https://board.circlewithadot.net/post/https://pdx.social/users/mossyfoot/statuses/116484914395168567Tue, 28 Apr 2026 23:25:37 GMT<![CDATA[Reply to It's amazing how fast attitudes to security in the industry has changed. on Tue, 28 Apr 2026 23:25:20 GMT]]>@foone I used to work for a bank with a huge security overhead. The machines that everyone used had quite a few limitations due to security. Windows 11 w Copilot must have them like the Chihuahua from Ren & Stimpy

]]>https://board.circlewithadot.net/post/https://mastodon.social/users/wtrmt/statuses/116484913276462469https://board.circlewithadot.net/post/https://mastodon.social/users/wtrmt/statuses/116484913276462469Tue, 28 Apr 2026 23:25:20 GMT<![CDATA[Reply to It's amazing how fast attitudes to security in the industry has changed. on Tue, 28 Apr 2026 22:38:46 GMT]]>@ellie @foone
This is why I label all my projects as eternal betas.

None of my tools are in production, so they are secure by definition.

]]>https://board.circlewithadot.net/post/https://mastodon.sdf.org/users/bayindirh/statuses/116484730138639665https://board.circlewithadot.net/post/https://mastodon.sdf.org/users/bayindirh/statuses/116484730138639665Tue, 28 Apr 2026 22:38:46 GMT<![CDATA[Reply to It's amazing how fast attitudes to security in the industry has changed. on Tue, 28 Apr 2026 22:37:57 GMT]]>@bayindirh yeah that story (and some recent experiences I can't go into) is what prompted this

]]>https://board.circlewithadot.net/post/https://digipres.club/users/foone/statuses/116484726955142496https://board.circlewithadot.net/post/https://digipres.club/users/foone/statuses/116484726955142496Tue, 28 Apr 2026 22:37:57 GMT<![CDATA[Reply to It's amazing how fast attitudes to security in the industry has changed. on Tue, 28 Apr 2026 22:37:10 GMT]]>@bayindirh @foone can't have vulnerabilities without any production!

]]>https://board.circlewithadot.net/post/https://ellieayla.net/users/ellie/statuses/116484723864496105https://board.circlewithadot.net/post/https://ellieayla.net/users/ellie/statuses/116484723864496105Tue, 28 Apr 2026 22:37:10 GMT<![CDATA[Reply to It's amazing how fast attitudes to security in the industry has changed. on Tue, 28 Apr 2026 22:29:54 GMT]]>@foone it has also passed through our mind that if there is ever some really high-stakes version in which we have to do so, for survival's sake, our ability to do it will depend on the extent to which our personal way of thinking is under-represented in the training set. so we're not eager to donate our efforts to anyone's training set.

]]>https://board.circlewithadot.net/post/https://adhd.irenes.space/users/ireneista/statuses/01KQB3D5FEM0KPDZ5CSXD5DNWDhttps://board.circlewithadot.net/post/https://adhd.irenes.space/users/ireneista/statuses/01KQB3D5FEM0KPDZ5CSXD5DNWDTue, 28 Apr 2026 22:29:54 GMT<![CDATA[Reply to It's amazing how fast attitudes to security in the industry has changed. on Tue, 28 Apr 2026 22:21:29 GMT]]>hacking a computer program pretending to be a human is like some weird neo-victorian parlor game in The Diamond Age

]]>https://board.circlewithadot.net/post/https://digipres.club/users/foone/statuses/116484662180960216https://board.circlewithadot.net/post/https://digipres.club/users/foone/statuses/116484662180960216Tue, 28 Apr 2026 22:21:29 GMT<![CDATA[Reply to It's amazing how fast attitudes to security in the industry has changed. on Tue, 28 Apr 2026 22:20:54 GMT]]>@foone I love this sort of stuff tbh. Just like NFTs, it's great to have a filter like this that clearly shows who's actually nuts and who isn't.

]]>https://board.circlewithadot.net/post/https://dosgame.club/users/Tijn/statuses/116484659934907117https://board.circlewithadot.net/post/https://dosgame.club/users/Tijn/statuses/116484659934907117Tue, 28 Apr 2026 22:20:54 GMT<![CDATA[Reply to It's amazing how fast attitudes to security in the industry has changed. on Tue, 28 Apr 2026 22:20:38 GMT]]>I have SEPARATE TOOLS and TECHNIQUES for hacking humans and computer hardware and computer software. Mixing them up is just wrong and unfun.

]]>https://board.circlewithadot.net/post/https://digipres.club/users/foone/statuses/116484658868660566https://board.circlewithadot.net/post/https://digipres.club/users/foone/statuses/116484658868660566Tue, 28 Apr 2026 22:20:38 GMT<![CDATA[Reply to It's amazing how fast attitudes to security in the industry has changed. on Tue, 28 Apr 2026 22:20:10 GMT]]>@foone "syntax fuzzing" 😉

]]>https://board.circlewithadot.net/post/https://social.hackerspace.pl/users/viq/statuses/116484657003687281https://board.circlewithadot.net/post/https://social.hackerspace.pl/users/viq/statuses/116484657003687281Tue, 28 Apr 2026 22:20:10 GMT