News for hackers. Stuff that matters.
Re:Microsoft Security-101: Open-Source curriculum by kimixa on Saturday March 02, 2024 @01:39AM (#39570407)
Another perspective is if you haven't failed and analyzed the failure, you don't really know why your current processes might be succeeding.

Or if your processes are good at all, and it's not just luck, or being less of a target, that means the holes haven't been exploited yet.

Re:Microsoft Security-101: Open-Source curriculum by Veserv on Saturday March 02, 2024 @02:17AM (#39570608)
The slingshot penetrating your tank armor is not a helpful failure. Except for telling you that your processes are so wildly off base that you need to start over.

People who claim this kind of failure is useful are clueless. Failures are interesting in exploratory processes and useful when occurring within a predicted failure regime (i.e testing to failure). Unexpected failures in predicted success regimes just indicate process weaknesses. Repeated and continuous failures in similar fashions do not indicate strength, they indicate structural process deficiencies despite what cybersecurity bozos would like you to believe.