News for hackers. Stuff that matters.
Re:Dan Geer on CrowdStrike: It Is Time to Act by transpute on Saturday July 27, 2024 @01:55PM (#41088234)
> would the aggregate harm of multiple smaller bad events occurring over years be above or below the one-shot harm of CrowdStrike's screwup?

See US federal and state separation of powers as a laboratory for policy.

The harm is only "aggregate" if nothing is learned from each event.

If lessons are rapidly learned and diffused from each event, then multiple smaller events can reduce local blast radius, immunize others against known failure categories, and increase global resilience.

Re:Dan Geer on CrowdStrike: It Is Time to Act by tedunangst on Saturday July 27, 2024 @04:52PM (#41089261)
The only lesson ever learned from small events is "that would never happen here". Until it does.
Re:Dan Geer on CrowdStrike: It Is Time to Act by transpute on Saturday July 27, 2024 @05:19PM (#41089413)
Maybe smaller events can be tracked with an incident ID and analysis to forestall bigger events.

https://news.ycombinator.com/item?id=41018029