2,416 karma · joined March 21, 2013
I met you and we chatted for a bit at a bar after hours at a tech conference years ago, before you dropped you were a GitHub co-founder towards the end. You actually gave me some advice that has worked out well for me. Just wanted to say thanks!
I don't know who Shoshanna Zuboff is (I'll 'kagi' them), but I agree with the points made. It's been an evolving strategy of how to exploit users as a resource for financial gain or at least cover the costs of the free tier service.
For proton, I assume they have a free tier (I don't know I pay for it). So I guess they let people know to push adoption or get people to make the jump, but the assumption is they have some conversion rate to paying customers. For those that never want to pay for email as their usage scales, they're better off staying.
I'm getting closer to investing in a nicer media center setup and buying/ripping content I own. Especially since, I've gone Gen Z and find most of my evening viewing to be on various YT channels. If I'm going to spend 22 minutes to watch mindless, low production value, mildly amusing drivel, I'd rather it be by an individual content creator than another semi-reality competition show which seems to be most of what's on streaming platforms these days. I'll watch the odd series/show but I find myself getting bored and not finishing them.
Developers have the same incentive, they are not incentivized to build properties they'll make less on, even if supply goes up. I've seen lots of properties built, they can be half unoccupied/empty and the rents/leases don't change. They're simply not going to lower the value of their own properties, they'll keep it inflated because at least then it’s a tax write-off/loss.
This increased supply concept is being parroted but no one can provide examples of supply being increased and rents going down, or the very least demand can't be kept up with and no area gets saturated to the point prices go down. Usually the opposite happens, new apartment/housing = nicer neighborhood = more desirable area = rent/housing values go up. We usually call this gentrification. Not unless it was a government subsidized project or section 8 housing or a local economic collapse and people leaving (which cheap rent means little if there are no jobs/economy).
Developers are very risk adverse, they’ll never build in an area that risks supply outstripping demand.
I don't understand how people can live for 20 years, see these patterns and still believe the theories they get taught in economics 101 in school and think they're fully educated on the matter.
If you think administrations don't fudge the numbers to make themselves look more successful I don't know where you've been. Statistics are easy to mess with, and administrations favor the models that make them look better. It doesn't matter whose in office. Places like WV have seen mass unemployment for decades, but the numbers look better because people have gone on checks or government assistance and given up, thus aren't counted.
It's very telling most of the people here live around economic centers and find it very easy to ignore what stark reality is in most areas of the country. It's easier to believe a fairy tale told by the government, and only be critical of it when the opposing party is in office, when supposedly nothing has changed.
My point is the housing being built isn't going to serve the those who are housing insecure or migrants working construction jobs. If anything these places are taking over the neighborhoods that used to serve that sector.
Or rather, unless you put them up in hotels and send them back when done, how do you account for providing them housing when housing is already constrained?
- Drug usage increasing
- Depression/suicide increasing
- Life expectancy going down as a result of the above
- Homelessness increasing
- People are forced to take gig jobs, but this is somehow counted as fulltime employment.
- Taking people off the unemployment numbers because they haven't been able to find a job for 6 months or may have given up.
- College becoming unaffordable and leading to massive debt
- Housing becoming increasingly unaffordable, middle class households can no longer buy a home (technically to me means they're not really middle class)
I can go on.
Fudging the statistical measures by which we define economic slumps or saying its all cool cause Wall Street is recovering doesn't change what reality is for the average person. Things are getting worse for most people while getting better for smaller portion (wealth disparity increase).
Edit: Since I can't reply, if your measure doesn't account for unsustainable practices, then its not really a measure, or you're intentionally "changing" the measure to leave out accounting for unsustainable practices. Measuring growth in a fund when its all just a ponzi scheme isn't how we measure fund performance on a report. If this is done, its either intentional or incompetent. Either, is very bad when dictating policy.
My thing is, even if its not the main issue causing issues with demand, I don't see how you can bring in nearly 3 million "undocumented migrants in a year" who are all going to compete for the lowest tier of the housing market, and outcompete single parents, etc on what they can afford in rent (since many have several adults rooming together and sharing rent). If you only have so many affordable apartments/houses etc to go around in a town/neighborhood/borough, etc, an influx of a few thousand, especially in high population areas is going to drive rents up and create constraints on the market.
https://www.nbcnews.com/politics/immigration/migrant-border-...
It's certainly not helping. I don't see how you can not link these two issues, if you bring in migrants, documented or not (or not migrating through legal methods), they need housing, and its going to be the undocumented ones competing for housing in the sector with our most vulnerable citizens.
There seems to be some level of cognitive dissonance politically, at least in the media, when it comes to these two issues. Maybe those on the ground notice it or have tried to call it out. But if I can see it from my middle class suburbia, I don't see how this is getting missed, if not outright ignored.
All that to say, while certainly a local issue, this is a national issue I feel is at play here that local governments (short of stunts like bussing ppl to Martha's Vineyard or NYC), have no control over.
He literally looks like the devil in Rick and Morty. There's some other classic villains I'm sure are a more apt comparison but I can't think of any at the moment. https://rickandmorty.fandom.com/wiki/Lucius_Needful
Just good enough often times is an orgs own policies and standards, and security teams catch when things aren't meeting those standards.
Your complaints are a lack of maturity in your cyber security organizations. There are cases where a business can absolutely decide its "good enough". But that decision is made by people other than those that point out the vulnerability. It's usually done by which ever team handles security remediation or they talk to someone who handles that analysis as part of the remediation process if the fix seems prohibitive. Cost to fix can also go down as new solutions become available or infrastructure changes and a new design makes it easier to build in a fix/control/detection or whatever. So re-evaluating "accepted risks" periodically to see if its something that's easier to implement is also part of it.
Cybersecurity shouldn't be in the business of saying no (unless its something insane like storing passwords in plain text on open shares), we're here to say, "here's some problems we see", here's where we think we can help, everything else is up to the frameworks and policies your company has set to adhere to or someone at a higher level to say cost exceeds risk, we accept the risk until such point cost comes down, etc. Cyber should also be helping to put in systematic controls that make good controls the default, and good practices easy to implement, so that ops and devs don't have to think about it.
Threat Intel informs the red team, and we'll model our ops or threat emulation exercises off of that information, we also have a few members that came over from threat intel. Last I checked, Threat Intel engineers don't write malware to simulate malware real threat actors that target a companies industry use.
I think you're speaking from your limited experience at your own company. Again, you have to have a mature blue team before you're ready for a red team. Most orgs aren't ready for that, especially if you think Qualys covers your threat models. That's just vulnerability management and might catch some apps/hosts that missed the patch cycle.
If it's word salad, maybe its because you're out of your depth when and ignorant of how these programs are supposed to work.