News for hackers. Stuff that matters.
Re:U.S. tightens export controls on items used in surveillan... by GekkePrutser on Wednesday October 20, 2021 @08:30PM (#28938712)
Apollo isn't what I'd compare this to. There were a lot of near misses and there was of course one really big fail (the aftermath of which strengthened its quality culture a lot)

It's not as if this was some kind of profound rock-solid architectural effort from the start. It was a race and speed was of the essence.

In many ways it has a lot in common with information science today. A high speed of innovation. Go fast and break things. High risk high reward.

I think the parent was advocating doing the opposite. Going for rock-solid and secure. Set security design standards that are mandatory. The same way that we have a building code. Good idea really but development speed and features will suffer. It'll be a big change for an industry that's totally not set up for that. I doubt many consumers will be happy either, no more huge spec improvements every year or fancy new features to show off.

And it's not all tech either. Right now the main technique of ingress is phishing and opsec weaknesses. A mindset change is needed, not just for the tech community but everyone.

It'll happen but it'll take years, maybe decades. And we'll have our own "Apollo 1"s to underline the importance and keep us on track. And we already had. It was WannaCry that started the awareness process.

Re:U.S. tightens export controls on items used in surveillan... by ddingus on Wednesday October 20, 2021 @09:09PM (#28939025)
>think the parent was advocating doing the opposite. Going for rock-solid and secure.

That is the part of Apollo I was thinking about. Done right, the humans get back to earth...

Here, done right, the data stays where it should be and the systems do what they are intended to do. The people don't get notices...

And, like Apollo, lots of that would trickle out into industry and eventually down to ordinary people.

>Right now the main technique of ingress is phishing and opsec weaknesses. A mindset change is needed, not just for the tech community but everyone.

I am well aware. Seems solvable given a consistent culture and norms can be established, eventually polished and time tested, production proven.