Stories
Slash Boxes
Comments

SoylentNews is people

posted by on Wednesday February 15 2017, @10:08AM   Printer-friendly
from the because-they're-more-determined dept.

Society is operating under the illusion that governments and corporations are taking rational choices about computer security, but the fact of the matter is that we're drowning under a sea of false positive, bad management, and a false belief in the power of technology to save us.

"The government is very reactive," said Jason Truppi, director of endpoint detection and response at security firm Tanium and a former FBI investigator. "Over time we've learned it wasn't working - just being reactive, not proactive."

Truppi said we need to puncture the belief that government and industry are working together to solve online threats. In reality, he says, the commercial sector and government are working to very different agendas and the result is a hopeless mishmash of confusing loyalties.

On threat intelligence sharing, for example, the government encourages business to share news of vulnerabilities. But the subsequent investigations can be wide-ranging and lead to business' people being charged for unrelated matters. A result companies are increasingly unwilling to share data if it exposes them to wider risks.

The fact of the matter is that companies don't get their own infosec problems and don't care that much. Truppi, who has now moved to the commercial sector, said that companies are still trying to hire good network security people, but bog them down in useless false alerts and management panics.

-- submitted from IRC


Original Submission

 
This discussion has been archived. No new comments can be posted.
Display Options Threshold/Breakthrough Mark All as Read Mark All as Unread
The Fine Print: The following comments are owned by whoever posted them. We are not responsible for them in any way.
  • (Score: 5, Insightful) by art guerrilla on Wednesday February 15 2017, @11:35AM

    by art guerrilla (3082) on Wednesday February 15 2017, @11:35AM (#467336)

    was commenting on a work-from-home article the other day, which was appropos for me, since i was in the middle of lobbying my boss to do the same... after being put off for a meeting for almost 2 weeks, said, 'fuck it', looked in the ads on a friday morning before work, miraculously found one in my wheelhouse that seemed okay, shot out an email before work, couple hours later get a call at work they want an interview, i say i am 8-5 weekdays, he says i will be in the office saturday at 10, i go, give good interview, says he has a handful more interviews, let me know about a week from then... run around do some errands, get home a couple hours later, message on machine that wants to offer me the job (!)... immediately email bosses, say have offer for mo money, mo benies, blah blah blah... upshot, FINALLY get that meeting with boss mon morn, basically say i want to work from home, or i will take other job... *suddenly* they see their way clear to me working from home, BUT, not only that, decide they want ALL CAD techs to work from home from then on ! ! !
    bwa ha ha ha haaaaa
    and *that*, kampers, is EXACTLY why THE ONLY method for workers to have ANY 'power' (pitiful as it is) is to have the option of going to another job, otherwise, they don't give a shit...

    Starting Score:    1  point
    Moderation   +3  
       Insightful=2, Interesting=1, Total=3
    Extra 'Insightful' Modifier   0  
    Karma-Bonus Modifier   +1  

    Total Score:   5  
  • (Score: 3, Interesting) by Nerdfest on Wednesday February 15 2017, @12:06PM

    by Nerdfest (80) on Wednesday February 15 2017, @12:06PM (#467343)

    Yep. I was at a company talking wage rollbacks, so I looked for another job, and they offered me a raise. You really need to look out for yourself.

    • (Score: 3, Interesting) by art guerrilla on Wednesday February 15 2017, @12:17PM

      by art guerrilla (3082) on Wednesday February 15 2017, @12:17PM (#467345)

      meant to say in the wrap up, that is PRECISELY why we have what is called 'structural unemployment' baked into the system (minimum of 5%), so that we do not EVER have full employment such that it gives the workers bargaining power... BESIDES the bullshit unemployment figures which are TOTALLY gamed, the fact is the economy will NEVER have 'full employment' as long as the masters of the universe run things, because that takes away their power to control the workers...

      • (Score: 4, Funny) by Phoenix666 on Wednesday February 15 2017, @12:31PM

        by Phoenix666 (552) on Wednesday February 15 2017, @12:31PM (#467351) Journal

        I have been waiting my entire career for all of us to finally apply that remedy on the t-shirt to the PHB's and politicians: "Go away, or I will replace you with a very small shellscript."

        I can tell you we could safely replace every single human in the banking sector alone with such and no one would ever miss them. In fact, everything would work so much better. For every other sector it would be much the same, and if we find ourselves subsequently feeling nostalgic we can program a robotic arm to throw chairs and randomly blurt pithy phrases like "value drivers!" and "leverage our capacity!"

        --
        Washington DC delenda est.
      • (Score: 3, Insightful) by mhajicek on Wednesday February 15 2017, @02:27PM

        by mhajicek (51) on Wednesday February 15 2017, @02:27PM (#467389)

        A growing percentage of people are simply unemployable. As automation improves and spreads the capability bar rises.

        --
        The spacelike surfaces of time foliations can have a cusp at the surface of discontinuity. - P. Hajicek
  • (Score: 2) by ledow on Wednesday February 15 2017, @02:55PM

    by ledow (5567) on Wednesday February 15 2017, @02:55PM (#467396) Homepage

    Yep.

    That's how you find out your value. You look around, see who else would want you, what they'd give you and then whether the place you're at can give you more.

    Not just in terms of money, but "power", hours, flexibility, benefits, working environment, treatment, commute etc. etc.

    Even when I'm in a job I'm happy with, I always keep an eye out. Why not? Maybe you could make a fortune elsewhere or maybe there's somewhere closer to home that needs you more badly, or whatever?

    Worst case, you don't interview for it, or don't take it if it's offered.
    Best case, you get offered something better and/or can use it to bolster your current job, and your company realises that you could be poached if they're not careful.

    And if your current boss gets upset and doesn't want to retain you after? That's precisely how much you meant to them all along.