Talking about choosing the risk you're willing to accept.

Show Post

Then a big RCE vuln dropped. I had to make the call at 7pm on a Saturday to remove access for the remote people or not We shut it down. 3 business days before alternative access for them could be established. I got some great emails about, 'not considering consequences' and 'lack of planning'. 🙃

Show Post

In the last there were some significant vulnerabilities on an externally face product our staff used. It was was load bearing for a few important people at the time. We were in the middle of planning for external access removal as it been patches 3 weeks running.

Show Post

Wherein I continue to entreat people to remember Type 2 errors

Show Post

I am not your intended audience for this question because I am something of an AI-ophobe. I trust it to write a function for a complex task in a language I know well. I don't trust it to make, even little, judgements. I don't think anyone should trust it to make judgements.

Show Post