Hacker News Reader

Guess you don’t remember the days of ssl on login pages, ssl strip, exfiltering data via JavaScript prototype pollution, and a million other things like that.

Only just when we started to have a resemblance of security we got agile and startups breaking things (making rubbish software to capture a few bucks faster) and now vibe coding and llm assisted hacking.

The point of my, arguably rant, is that there is nothing new under the sun.

View on HN

I'm not sure my worries are assuaged by thr fact that it's been bad before, too.

It should. We went through couple of cycles of "things are bad, inmates are running the asylum" before, and nothing of consequence happened. The world still goes on.

It's not a guarantee this time will be the same - but it should temper the worry somewhat.

Uh, even the database with all the compromising information on everyone with a US security clearance got leaked

Previously no one was dumb enough to put that in one electronic database - it was on paper.

This is going to get orders of magnitude worse.

I thought security clearances are a dime a dozen, and "all FBI employees" list is full of administrative work and basically 80% mirrored on LinkedIn? (Yes, the remaining 20% - or however much - leaking is a problem.)

They are not a dime a dozen [https://en.wikipedia.org/wiki/2015_Office_of_Personnel_Manag...].

Reply on news.ycombinator.com