It’s also impossible to say that I am not responsible for a breach of your private data either. How much should the Irish Data Protection Commission fine me?
2,599 karma · joined April 14, 2018
It’s also impossible to say that I am not responsible for a breach of your private data either. How much should the Irish Data Protection Commission fine me?
The only confounder is really that the top teams have the ability to attract the top driving talent, so it can look like driving skill matters less than it actually does at times.
The world has been rather slow to move off this standard, but NIST has been a huge enabler of that, so I don’t think they deserve any hate for this. Not too long ago the NIST password guidance was THE authority that enabled regulated companies (like PCI companies) to migrate off password complexity requirements with a compensating control.
There’s plenty of other toxic security ideas out there as well. I would argue any control that generates large amounts of user friction for a negligible security benefit is probably a net downgrade in security posture, as user friction just normalises a culture of circumvention. Hopefully authorities like NIST can lead the way in tackling many of those as well.
From the DC perspective, the biggest costs for providing colo are power, AC (which is mostly power), network and real estate. Supervising rack access is a very small line item in their accounts.
The admin for those arrangements is pretty simple really. Even if you’re providing supervised access, it’s not going to be much work. I run several small colo deployments like this, and I probably only visit the sites every couple of years.
As a baseline, moving production workloads that run entirely on VPS or physical servers between datacenters is already a very high cost/high effort task.
Anything you do to make the architecture more complicated is going to increase those costs.
All AWS (and co) did was offer a platform for building complicated architectures. The market response was overwhelmingly positive, and entire new engineering disciplines sprung up around managing and building these new complicated architectures.
Migrating them is typically rather difficult and high cost, but everybody knew this from the beginning, and this is what the customers want. The PaaS providers could maybe do something here or there to make it easier, but there’s nothing they can do to address the fundamental problem.
The effects of inexperience and general unreadiness amongst some of our biggest adversaries are currently on display for all to see in Ukraine.
Not that I'm saying this is an adequate justification for any of the terrible wars we've waged, but it is an outcome that should be accounted for.
None of this would be possible without the security provided by the militaries of the western democracies. Strong militaries don't cause this outcome, but they are 100% required if you are trying to create it. The only way to prevent all of those bad things that you have the described western militaries doing from happening where you live is to have the protection of a strong military yourself. This is such a plainly obvious fact, denying it is about on par with the "defund the police" rationale. Sure they can do bad things, and that can be addressed, but society needs the military possibly even more than it needs the police.
Most of the negatives you’ve listed here are a result of other countries defence force inadequacies.
I also don’t think that the public really has much of a say in what gets tax payer funding. Governments are just bureaucratic behemoths and once they start paying for something, they can almost never find an acceptable way to stop. Additionally I’ve never met a tax funding recipient that was grateful to be getting it, if anything the perspective that they should be entitled to even more is a lot more common.
Again, I’m not an expert in how these things work, so I’m happy to be corrected. That to me just seems like the most obvious way the new dual energy scanners would be put to use.
Avoidance and “minimisation” are the same thing, evasion is a crime.