Email or username:

Password:

Forgot your password?
Stuart's posts Post Back to profile
Top-level
Tim Hergert

@Aphrodite @calamari we've progressed from "cargo cult" to "checklist cult"

At least with the former, we got to build cool bamboo models of planes and control towers.

19 July at 15:25 | Wall-to-wall | Open on infosec.exchange
5 comments
Aphrodite ☑️ :boost_ok:

@cjust @calamari

tbh the Adeptus Mechanicus of 40K make too much sense in that framing

they don’t know why tech works, they just know to do the rituals and they can make a thing

19 July at 15:54 | Open on chaos.social
Tim Hergert

@Aphrodite @calamari I spent far too long one weekend looking into nuclear semiotics and have decided that the best thing that we could do for future generations is genetically engineer a cat species to glow in the presence of radiation rather than try to instill a nuclear priesthood.

I think that this same logic should be applied to software QA as well. I'm certain that we can bioengineer a cat to glow in the presence of a faulty AV update. Then we can change the checklist item to "□ IT department properly equipped with glowy cats"

@Aphrodite @calamari I spent far too long one weekend looking into nuclear semiotics and have decided that the best thing that we could do for future generations is genetically engineer a cat species to glow in the presence of radiation rather than try to instill a nuclear priesthood.

I think that this same logic should be applied to software QA as well. I'm certain that we can bioengineer a cat to glow in the presence of a faulty AV update. Then we can change the checklist item to "□ IT department...

19 July at 16:03 | Open on infosec.exchange
TomDB 🦣

@Aphrodite @cjust @calamari the last paragraph seems to apply to modern day youth using AI to do homework as well.

20 July at 8:46 | Open on mastodon-belgium.be
Kayfox

@Aphrodite @cjust @calamari I was about to bring up the techpriests - following the Catechisms of Compliance but often not understanding why.

"our PCI scan shows this software is vulnerable" Yes because RHEL security backporting existed and you're only checking the version number and not if the vuln is actually there.

21 July at 12:03 | Open on meow.social
Sebastiaan Dammann

@cjust @Aphrodite @calamari That's because the reviewing the checklists can then be - no offence intended - offloaded to cheap workers in 2nd and 3rd world countries who are judged by the checklists they sign off. There is no room for critical thinking or adapting to the particular situation. I see this happening daily.

20 July at 3:56 | Open on mastodon.nl
Go Up