alt Hacker NewsI hate hearing about security because I saw orgs decimated by paranoid (and incompetent) security to such degree that nothing could be done there and I had to look for a new job.
I hate hearing about security because I saw orgs decimated by paranoid (and incompetent) security to such degree that nothing could be done there and I had to look for a new job.
One time a startup I worked at (NOT YC THIS TIME) had a "secret shopper"[1]
[1] Some old guy who I'm pretty sure was a severe alcoholic
Send us Gmail links that were 1000000000% obviously fake, like from a fake version of the CEO saying to wire him cash.
I opened the email in gmail to copy the text to Slack, and was like "Did anyone else get this?"
One other guy goes "lol yeah wtf"
Next day in standup, security alcoholic is there. He goes:
"2 people opened the malicious email"
I'm like dude. Nothing will fucking happen if you open the Gmail message We didn't DOWNLOAD anything or visit any URLs.
No. In the boomer mind, we were retards. We should be fired. We weren't, but we should have been. ???????
I'm like "GUYS" "I have some React components to make, what the fuck are you doing today?????"
There are so many instances I wish technology was removed from "the pedestal" and just treated how it is. What it actually is, there is no non-determinism we can prove everything. I don't care if that makes it $30/hr work at this point, I just can't handle the pretentiousness anymore especially around faux security