aiisjustanif

The is in most organizations under the CISO or Head of Security to some degree.

Because these are known risks for a CEO of a top 3 market cap company. Not to mention there is still to be an investigation on if it was on purpose.

This a known attack vectors that global security teams and front of house security teams go over yearly with C suite.

There is obviously a range to magnitude and consequences. However let’s stay on topic, the action of feeding information to a spy while being the CEO of a top 3 most valuable company on earth, knowing this is a known risk smh.

One dependency of many. Who you know, school you went to, communication styles, past roles and companies, country you are born in, and other biases all can play a part of landing a job. I’ve seen quite a bit of “they don’t have FAANG or X type of tech company on their resume” vs this other equally good candidate be justification multiple times during interviews I’ve done.

That’s why you go medium and choose Charlotte, Houston, Detroit, or Raleigh

Sounds like a marketing problem and this Occupy SaaS movement is trying to solve the marketing problem and have new version of existing FOSS software.

I’m curious of the use case, I use Sonnet for Insider Threat investigations and detection engineering daily without issue.

It’s even an HN community guideline ironically, assume good faith.

> The Product person wants to deliver the right product properties so they model their process around identifying the ones they want and then creating the right framework to get them.

You can try model all you like, but eventually you have to go argue with finance because you work at Snowflake and your new SaaS product needs a new SKU and is slightly different than this other offering because it has enhanced security on larger storage.

Don’t forget there is a new manual process for troubleshooting this because it overlaps with another feature potential that we found in testing. You need to go make sure your Customer success team is aware of this and has at least some internal documentation.

Ah crap your sales director says they had 2 other competing features that take priority over your feature to train up Sales Engineers to cross sell. So you have meet with existing customers to try and garner interest and also work with comms to make another product release post with higher visibility.

Oops do forget to grab your next ticket for next sprint that just started from Jira, since you are a dev too.

To be fair, while the threads don’t show it, majority of companies that survive by processing payments. Shopify, Airlines, Rental Car companies, Banks, etc. are still doing and generally can prove at anytime 2 party review is happening on any PCI related code. It’s just that many people don’t work on that, and regulating a new feature for the ESPN Fantasy Football service seems silly.

5. You do whatever works to Meets Expectations

You just described the need to rewrite or abstracting out a new contract for a codebase because the fundamentals of a contract were broken. They are completely different objects.

This problem existed before AI and great when you caught it.

I think we passed the inflection point of the normal 150-500 Lear code problems, understand DSA and systems design really well. Personally, I think companies are much more selective now and have all reduced the size of their engineering orgs.

There’s always been a percentage of luck getting offers from big tech companies, but it’s way more luck than than merit it has ever been.

I'm assuming good faith for you, please do so for me when it comes to credibility. I don't think the supporting references and my argument that I think your position is too skeptical warrants reducing it to XKCD.

> What bad PR?

It literally changed Apple's marketing and privacy features for years to come [1] and at the next request of the FBI forced them to choose privacy and security as something the would like to be known for and incorporate into their products long term. [2] Snowden made a note how effective Apple's encryption had become in 2016. [3]

> Why would you even remotely believe that they are not under a similar situation with the current admin? It's just ridiculously naïve.

Multiple aspects of the larger program was done without the knowledge of the tech companies, PRISM was no where near the level of pervasiveness as Upstream. [3]. They inserted a man in the middle on the fiber lines leaving data centers to copy traffic, functionally making backdoors unnecessary.

> 3rd party contractors had access to your siri conversation

I'm glad that one was leaked, it's something that a lot of us thought was happening with many voice assistants, and it shows just why sensitive quality control should not be outsourced.

> Your position is just not credible in 2026 . . . ignores two decades of history. . . Reading such argument on HN tells me Snowden did throw away his life for nothing, damn.

Same goes to you, you ignored all improvements related to this discourse over that time. I'm highly skeptical of many corporations, including Apple, but my goals are to understand the whole picture and direction. Overall Apple has been up and down in terms of security and privacy commitments, but significantly better compared to companies such as Google, Huawei, and Meta.

[1]: https://www.apple.com/apples-commitment-to-customer-privacy/ [2]: https://en.wikipedia.org/wiki/Apple%E2%80%93FBI_encryption_d... [3]: https://www.youtube.com/watch?v=cJ6PpX6xg-E&t=1808s [4]: https://www.eff.org/pages/upstream-prism

I mean it's proprietary, but we understand the architecture well enough and have high degree of trust for a reason. Trusted execution environments have been around for years with really good results from a security and privacy perspective. Apple enclaves have been around over a decade and exclave 2 years now [1]. If security researchers find that backdoors exists and not just an exploit, it's in Apple's best interest to fix it based on bad PR alone.

AWS enclaves [2] have been around for a few years now with decent research on the topic and they are highly secure from personal experience and pentesting [3]. The idea at least is similar for exclaves, instead of a separate VM or a completely detached coprocessor chip, Exclaves create isolated resources on the main system-on-chip.

[1]: https://randomaugustine.medium.com/on-apple-exclaves-d683a2c... [2]: https://aws.amazon.com/ec2/nitro/nitro-enclaves/ [3]: https://arxiv.org/pdf/2206.04123

I would never underestimate the potential multiplying force of open source, unless you have some real secret sauce.

To be fair the cyclical nature of funding and defunding security teams which causes scaling up and scaling down, has always left a race to the bottom in security.

Any CISO or head of security loves the ideal of completely using AI to handle incidents, tune detections, implement mitigations, track vulnerabilities, pen testing, etc. This feels like it driving security teams to have less critical thinking.

Seldom? There are a lot of solutions used everyday that are great and better than the alternative of building it yourself

It’s apples to oranges at the end of the day, the question is why can one be automated and not the other.

The whole point of the post is not to straw man CEOs it’s to point out that if devs can be automated then so can CEOs. Treating a founder and CEO as the same thing can be easily a false equivalency depending on the company.

Happens often from what I remember reading and most grocery stores account for the loss. Definitely lots of accidents as well.

I think it’s important to highlight they were correct in identifying problems but the solutions were flawed. The book “Wither Socialism?” Explains it well.

[1]: https://archive.org/details/whithersocialism0000stig_i9j5/pa...

If by command you mean by using coercion or compulsion. Then history has told multiple stories that show to sustain power you need more than just to command. Whether it be centuries ago like in the Peasants’ Revolt of 1381, the Russian Revolution of 1917, or the more recent complex stories of power like Euromaiden in 2013. In my opinion history and modern time supports the theory of hegemony very well.

Ironically one the top modern examples of the powerful understanding the need to convince and executing on those goals is the global dominance of Silicon Valley tech platforms and the billionaires that lead them.

They shape what is "common sense," and political discourse worldwide without direct command.

To be fair prompts is just English language intent abstracted for code. It is still am very much a thing. Why do you feel that harness customization is fleeting, enterprises care about them a lot for many reasons from compliance to security.

Please explain why Flock is needed.

Which ones? Mastercard banned cannabis related changes before [1]

[1]: https://www.bloomberg.com/news/articles/2023-07-26/how-to-bu...

Definitely a plausible possibility

How are you handling content moderation?

Well that was more disturbing than I thought it would be.

I cried when Mercedes go rid of the click wheel. Research in this article be damned, I’d argue that rotary knobs with directional shifting like Mercedes paired with great software are the best car infotainment interface in recent history for screens in cars.