1dontnkow_

It seems it was one of those cases where the "InfoSec" Department kept doing all these trainings how we don't do that and why but some manager or head decided to sent that email and surely cant face repercussions due to influence.

In the end it fucks me because when I tell my dad "Oh they never ask for you password, so don't say it to nobody no matter what."

He "But when they asked us last year?!"

I'm actually curios to know how do you people visit the link securely? I guess a VM but could in theory something be resilient enough to misuse the Shared Clipboard or something to access your host machine?

Also what is your go to OS?

Hm, when I think of it an old Raspberry Pi could be my go to for this, but always physically.

Yeah at least when you interview locally in your areas, you get to meet them before you get a random test assignment.

But also online, once or twice I received these Leetcode style sites to register and do a few tests before we meet, which was weird for me and I just ignored it.

One of them later asked "Why I didn't have time to do it yet" and I told them I first meet people and check the fit before I do tests, like who the hell does that differently?

Hope it hasn't become a way more common thing.

This reminded me when we I was a kid we had to split the wood for the whole winter and that was actually a huge job all day or few days and way harder than just a moderate workout.

I hated it then but actually now I miss the time I spend with my father and brother.

Yes but I have also coworkers who implement a full feature then remember to commit it, so we cant know for sure if its just that.

I don't wanna say but some people decide to do the unthinkable and that's how boulevards are filled with statues. You always have a choice, they just all suck.

There were quite some that refused due to principles and beliefs, but I guess not enough, and when there are not enough the first sacrificed for nothing.

Some places for other evil ideas that didn't reach global size, it means enough people stood up and they won.

Whats the formula? I guess nobody knows.

Well to be correct also the parent said "is also a big factor" so Id say there are like 10 big factors (or dunno) and society should ensure countries are linked and allied by those factors.

I use that quote alot too when it suits me but given we are actually talking about war and crisis isn't it more accurate to say:

"Hard times eradicate most of the population and some survive with heavy PTSD and regrets, then after the destruction some peace agreement is reached and so after many years of rebuilding the good times do come."

Because most other countries don't even have a quarter of the military and resources the US has and there its usually about survival and defense of their borders with direct neighbors or at worst case region.

But with the US military, at least the years I was alive, it seemed to be never a real national security threat at the borders but very far away and for so not obvious reasons.

In the end however I agree with your "defense is necessary" and that's why NATO exists and should be developed further so its more strict and almost all nations worldwide join.

Look I understand he didnt give up on every good thing in life following his principles. But how many people actually resigned and wrote their reasons why?

It at least gets circulated and discussed. Even at Google I'd assume people who have the privilege, seriously thought of leaving or way better if someone knows something really shady is going on, whistleblowing.

The thing is sure you are right, but if I started living my life "I cant ever say or have principles and act based on them, because about 25 years ago I broke one so now its not allowed" then, that surely, would ruin my life and if everybody did society and wouldn't these companies love that? When we all give up so easy? Aren't the companies the first that go on sexual harassment allegations with "if this was going on for years, why you coming out now, huh? Ncncnc".

So my point is, its still appreciated. Lets work with reality and not that idealistic version of society where only the perfect people can decide our ethical directions because they dont exist and we will fall into the dark.

Thats very true and I think about often because even in everyday task e.g. "We need a new feature to download reports" then you get a ticket but still depending how much that is used, desired, invested in or marketed and all those things, how flexible should I make, whats all the errors, whats the data, how secure and million other small or bigger decisions.

The point isn't how user stories are written, but realizing that everything is a compromise for practicality since if I wanted it to be the most secure thing ever, Id say "Lets just not offer that feature at all".

But now back to cars, I like that I heard some companies promised or started to build cars again with real buttons. In our world its when I try to use more and support the tools which aren't build on Electron (and slow as hell) but actually care about performance. Open source and decent enough security is already the minimum requirement.

The thing with zero bugs is that software is very complicated not due it being harder than hardware but by simply that get some devs, POs, sys admins, devops and stuff and zero bugs will be defined entirely different.

For example, in theory the only real system with zero bugs would be one you use exactly always the same way, at the same place for the same exact goal and never change that.

Its a bit related to the old saying in cybersec " the msot secure system is the one who isnt used at all and not connected to anything" so basically a tradeoff with UX always. But who would want that?

I think thats why software on more actual mission critical systems are way more stable and bug free... still hate the word. Because it cant be avoided, since you see bugs sometiems are just situations when your uncontrolled actors (users, other services) use the system in a non-intented way so you try plan for that such us retry mechanisms, logging, backups etc.

Because when we further think about it, have you ever witnessed a system in real life thats bug free? Humans have bugs all around, buildings, cars, even nature. So how would you expect we could do that, esp each random company? Also do we want that? What if we said there is a 100% defiend system we can make perfect in 100 years... Good, but whats the point?

Until somebody remembers to read those mails, the mission will be already over and forgotten. LOL

Id assume the result of hardening and verification prcoess would be entirely removing those softwares and everything they bring with them. Fork a Linux Distro, NASOS or whatever, adapt it perfectly to your needs and you'll have a software that you can work on for 100 years with full control and security at your hands.

The market then will change and new trends and stupid fads will come and pass, the distro and all its software youve made, will stay the same.

Quite true! These last years Ive been working at these companies where we have security audits from this very non-tech people, who have no idea what actually a CVEs is besides the "Severity" level.

Way early in my career the "Security auditors" were the cyber security experts that programmed since they were children and actually read and tested the code.

How do you mean that? In my Linux Laptops updates never happen unless I trigger them and nothing really changes even years after the last installation. You could boot it up and use whats there and just never update.

Due to the immense resources NASA has why would they ever deploy this bloated software on spaceships? Wouldnt it make more sense to fork some open source project and slim it down and adapt it perfectly to their needs?

I have no problem with gambling as long we are absolutely sure its not done by children and teens, heavily regulated, strong limits (e.g. one play per day), required training or community memberships at addiction groups and things like that.

I didn't finish the full registration but Polymarket basically didn't ask about anything besides email and new pass. Maybe later when someone wants to bet but it should be harder and take a week at least like a cooldown effect, and never more than 100 EUR at a time.

There are many ways to heavily regulate it so that a few people can enjoy it at times occasionally but help those people who need it and make it very hard for them to come back. But then the income iwould be so small it wouldnt land on the news anymore.

PS: Not an expert in gambling and addiction, my concrete examples might not work but still I haven't seen other efforts so that was my point.

I remember a company during the interview asked me are things I do not work with or don't like, especially since they had a very diverse team culturally where e.g. some folks couldn't work on any kinda gambling resembling platform due to their religious beliefs.

I told them that TBH didn't think much before about it, appreciate the question and to answer: I could never see myself working on weapons used for war, products used by countries to repress their population (relevant due to my upbringing) or any kinda of mass surveillance system. The HR just noted them down but I saw every technical person smiled and understood truly what I'm talking about and they insured me that they so and so don't ever work on those kinda projects.

PS: before someone comes now and says "BUT DO U USE IG?!" No I don't use most social platforms but also if I did just because I'm flawed and the system isnt perfect, doesn't mean I'm gonna give up on all my morals right away and not choose better when I have the option.

Just put it at top of values or some kinda culture fit or hiring policy document, and youre fine.

PS: Not absolutely every company has to let go of all morals and focus purely on profit. Thats the beauty of companies, you can open and lead them for different reasons.

Im from Germany and there are many companies like that, there the Values (or a Mission) that are actually taken into account when decision making and sometimes you lose money but that's expected and normal.

Thinking gambling in any way or form makes the world a better place or just leaves it as it is, is utterly delusional and any contact (or support) with that person should be avoided like the plague.

I was thinking about this but sometimes its hard to distinguish between what the marketing of OpenAI, Anthropic and other companies say and what actually all the companies are doing throughout the world. Any thoughts on that?

For example even the layoffs, nowadays seem to be because of AI or so they said but just a year or two ago there were quite some layoffs and people said "its because of the high demand in COVID and now its over, or Ukraine or inflation" but then that ignores that exactly during that time earlier were there many layofs but it was super easy "Oh COVID and supply chain!" and earlier maybe something else.

Surely there are also economic booms but when did the whole world jsut suddenly started seriously listening to public statements of companies (and that jsut a few with no real income, just money from VCs) and nobody shows us the real data of whats actually happening? E.g. the companies saying they fired 10K due to AI, how much did they actually now direct their budget to AI? How many products are actually being build? Is the productivity the same? Are the customers thinking that support is suddenly amazing or actually it has seriously dropepd in quality? Or no change at all? Is it a company like KFC, your local hardwore chain store, financial isntitutions, truck manufactures or anothet AI company with funding using another AIs company with other funding using now one more AIs company products up to the power suppliers?

For me it seems that its definitely impacting things and a cool technology to be more productive (for example it helps me a lot daily but its not like my life really changed) but the other things I haven't seen yet.

Another point each actual AI generated app is either something akin to a toilet game or not really working (like the C compiler). So where are the amazing enterprise complicated apps fully built via agents? In banks, in government, in apps that respect GDPR and actually are secure but proudly build only or mostly with agents? The only ones, not even secure, are other AI apps to do AI stuff but its whole value it says is to be more productive in the "real" economy but it still hasn't done it yet anywhere. People still struggle with Word or AWS infra or debugging why some specific user cant log in with their custom auth provider at some esoteric region with their laws and audits and GDPR variant.

So one side says its basically a tool from God and they never have created more stuff but on the other hand the other group analyzing blood work, delivering food, writing reports, etc uses it a bit or not at all but all the 95% of problems they had are there with some new ones. Also I'm afraid most of them just write now their email better or with more volume, but no real work is getting done.

So yeah maybe my confusion simply lies in that fact that I have a real job and nobody can keep up with all the slop and shit generated online anymore. I'm open to feedback or learn.

This makes me think of a thought I had the last weeks and months with the geopolitical chaos currently in the world:

While understanding the danger of dictators and technical mistakes and the chaos that would ensue, besides that, what would happen if just every or even just most countries had nukes? Just give them to everybody, and I'm really not convinced we would end up in a Fallout situation but maybe quite a peaceful one? No expert in that but tbh when you think about it most of the countries getting fucked don't have them and the aggressor always seems to do.

I realize this is very simplified and many things I'm probably not seeing but I'm open to learn.

How can we be absolutely sure this is actually an AI agent making autonomous decisions and not just a human wasting our time?

How do you report that account to GitHub? I believe that accounts should be solely for humans and bots (AI or not) only via some API key should be at all times distinguishable and treated as a tool and not part of the conversations.

You phrased it in a way as we decided to or somebody even asked us. I don't think that's how it works. Humans don't sit together and decide their future, we aren't that coordinated or united. But people like Elon and other people or groups, with the right resources, network, luck, talent and money build their vision of the future and how it turns out nobody knows until it happens.

Yes but we gotta understand that sometimes some things the citizens suggest end up on the law. So we should just continuously fight to keep that happening.

Additionally, the EU and its administration, is a big group of people. There are probably different people or teams pushing for this idea, which all in all, is a very good one, maybe even fellow (ex) open source contributors, and the ChatControl thing, surely comes from other groups with entirely different interests.

Hm, I'm trying to keep an open mind here so help me:

Why exactly would that be weak? Given the resources and connections it needs, wouldn't it be actually very strong? Also, I'm from EU, and nobody in their right mind sees Italy as the victim. The politics in Italy gave gone insane and they are a huge example of a fuck up as a whole country. Also the EU, is trying to push censorship law and most companies in EU are fight with everyone they've got to not let them pass and organize petitions and what not.

Also are you all people supporting this law and the fine or do people, for some weird reason, have started to hate Cloudflare and letting their emotions cloud their judgement? Lets forget Cloudflare for a moment and imagine just another company... Would you still agree entirely on this laws contents and the procedures and fines issued? Lets please all focus on the important topic here. Companies come and go, but destructive laws keep us suffering for decades on end, maybe forever.

He is not asking Vance for help as an individual but the position he has for the country the company is headquartered in. What would you expect? They cant go and ask a random country for help on a complicated geopolitical issue. You are supposed (maybe required) to contact officials from your country and relevant agencies and institutions.

I'm not the biggest fan of the US Administration currently either but if a company asks them for help, they're doing what you're supposed to do, and they shouldn't be labeled as bad or sharing the view of the current administration.

That has nothing to do with "hate speech" and is just sold to Americans like that. Critisism and hate speech are entirely diffferent things and US's adminsitration is just.. idk insane lately? In EU, specifically Germany, its very different. You can critique publicly all day every day all politicians, dead or alive, as much as you want to and nobody is allowed to even give you a mean stare. But you can't spread hate or directly specifically offend someone, but surely comment on their performance during their mandate.