Guess you don’t remember the days of ssl on login pages, ssl strip, exfiltering data via JavaScript prototype pollution, and a million other things like that.

Only just when we started to have a resemblance of security we got agile and startups breaking things (making rubbish software to capture a few bucks faster) and now vibe coding and llm assisted hacking.

The point of my, arguably rant, is that there is nothing new under the sun.

▲

gspr 17 hours ago | parent [-]

I'm not sure my worries are assuaged by thr fact that it's been bad before, too.

▲

TeMPOraL 15 hours ago | parent [-]

It should. We went through couple of cycles of "things are bad, inmates are running the asylum" before, and nothing of consequence happened. The world still goes on.

It's not a guarantee this time will be the same - but it should temper the worry somewhat.

▲

lazide 14 hours ago | parent [-]

Uh, even the database with all the compromising information on everyone with a US security clearance got leaked

Previously no one was dumb enough to put that in one electronic database - it was on paper.

This is going to get orders of magnitude worse.

▲

TeMPOraL 12 hours ago | parent [-]

I thought security clearances are a dime a dozen, and "all FBI employees" list is full of administrative work and basically 80% mirrored on LinkedIn? (Yes, the remaining 20% - or however much - leaking is a problem.)

	▲	lazide 3 hours ago \| parent [-]
		They are not a dime a dozen [https://en.wikipedia.org/wiki/2015_Office_of_Personnel_Manag...].