• 0 Posts
  • 280 Comments
Joined 2 years ago
cake
Cake day: July 1st, 2023

help-circle



  • Tbf not that hard to increase waste by 25%. Just think of how a new staff takes a long time to do easy work, causes rework, and generally sucks up the time of the people around them until they get the experience and skills they need to do that job.

    That’s the micro scale, but in a macro scale it’s the same. Cause more waste, and not only will the money matter less, the public interest will be deteriorated and the entire foundation compromised.

    Actually just check out the history of CIA ops around in foreign countries. Consider how many of those countries end up with a high inflation rate and that currency becomes more worthless in a deathspiral.

    I think it’s not a single factor like “it’s orchestrated by state nation x” but I fully believe if the US is going to make itself weak then those countries like potentially Russia or China will take full advantage of it and offer a helping push. They’ll do it subtly. So it’s hard to see. But it’s just standard politics, and it would be insane to think they won’t take full advantage of a situation.




  • What would you suggest they sell on their Android store that users would be so encouraged to install a new store and then what they want?

    Steam already has a store on Android, you just can’t play games there because most games on steam either already exist on the native google play store, or aren’t compatible with mobile architectures like Arm64. Most mobiles unlike a arm laptop, have no x86/amd64 emulator which is what those games are compiled as by their developers.

    So what’s left?




  • biscuitswalrus@aussie.zonetoProgrammer Humor@programming.devSafe passwords
    link
    fedilink
    arrow-up
    4
    arrow-down
    1
    ·
    edit-2
    16 days ago

    Enterprise applications are often developed by the most “quick, ship this feature” form of developers on the world. Unless the client is paying for the development a quick look at the sql table shows often unsalted passwords in a table.

    I’ve seen this in construction, medical, recruitment and other industries.

    Until cyber security requires code auditing for handling and maintaining PII as law, mostly its a “you’re fine until you get breached” approach. Even things like ACSC Australia cyber security centre, has limited guidelines. Practically worthless. At most they suggest having MFA for Web facing services. Most cyber security insurers have something but it’s also practically self reported. No proof. So if someone gets breached because someone left everyone’s passwords in a table, largely unguarded, the world becomes a worse place and the list of user names and passwords on haveibeenpwned grows.

    Edit: if a client pays and therefore has control to determine things like code auditing and security auditing etc as well as saml etc etc, then it’s something else. But say in the construction industry I’ve seen the same garbage tier software used at 12 different companies, warts and all. The developer is semi local to Australia ignoring the offshore developers…


  • Loud people with big audiences should be called out when they’re saying dangerous things. Marginalised people didn’t get rights by being quiet.

    Be loud be proud. Call it out.

    His audience will grow up to be the ones who have that kind of thinking as they turn from teens, twenties and into their thirties.

    He reaches a lot of ears. https://twitchtracker.com/asmongold/statistics shows a huge audience but it’s people calling him out that have slowly turned his viewer base from growing to receding. As more people learn how worthless his opinion is, more people turn him off for good.

    So yeah, you should care to spread the message that when someone loud is speaking misinformation, your own voice gives those who listen to him an opportunity to make a choice to lose trust in someone they were watching for their hot takes.

    It works. The statistics show that. Even if it’s only because the algorithm stops promoting them too once the line stops going up.




  • Can’t agree more.

    I’ll add, from a organisational risk perspective, a government should ensure its not locked into reliance on corporations. There’s certainly an assumption especially in the government’s I work in, Microsoft 365 has no viable alternative. Yet that itself should be warning for the ACSC or signals directorate invest in open code such that if the provider aligns with a country you change positions on, you can fork your code, tender off its continued support to new maintainers, and continue on.

    Well, I know that ultimately nobody will get in trouble even if fears became reality. Everyone will put up their hands and say “we couldn’t see this coming and we had no alternative so there’s nothing that could have been done to prevent it.”. It’s just a disappointment that it becomes a missed opportunity for taxpayer investments to be invested, instead of lost to corporate fees straight overseas.







  • In my 20 years of outsource IT career I’ve helped lots of business moguls with their personal home mail servers, since I already support their business IT. This doesn’t mean it’s easy, it means they’ve got money to ask someone to do it.

    I’m going to tell you, it’s all nice and easy if you understand servers, backup, networking, dns, and security. If you don’t, you’ll probably get it working, for a while, until it doesn’t.

    Why do you pay IT if it’s already working? Why do you pay IT if it’s not working?