Show newer

To survive in this environment, you have to remember that you are not the risk owner. It is your role to assess the risks, design the controls and assure them in operation. If the risk owner doesn't want to listen to you, that's their funeral.

And always remember that security engineering is a sought after discipline. If something is making you really uncomfortable, hit the bricks. You'll have a new job in a week.

Show thread

6) Some engineers are fatalists. To them, there is nothing that they could do to prevent their system being compromised, so why bother?

7) Security vendors do not help, because they promote messages about how scary the threat is, and how organisations should prioritise defending against APTs over getting the basics right.

8) It is exceedingly rare that management will give security sufficient authority in engineering governance. Things will go out the door that you are deeply uncomfortable with.

9) Change control board is where security controls go to die

10) Nobody appreciates being told "I told you so."

Show thread

4) When times get tough, secure by design is the first thing to be pared back. This is probably related to it being seen as a nice to have, and not an essential performance requirement. To get it right, it has to mature at the same speed as, and intimately related with, the design. But when the project goes on a diet, engineering will still progress and security has to catch up later, after many opportunities are lost.

5) In the absence of an effective regulator, investors and 'visionaries' will always prioritise features and time to market over security. Socialise risk. Privatise profit.

Show thread

I've spent the last 9 years of my life developing, promoting and using secure by design in my engineering field, and I've learnt a few lessons:

1) Techbros *hate* SbyD. They see it as a blocker and they don't want to engage with it at all.

2) Safety engineers don't trust security, and don't want security within 1,000 miles of safety systems, even when its purpose is to assure the integrity and availability of those systems.

3) Programme managers and project engineers never budget enough resources for it. It's either an add-on, or a nice to have, but rarely embedded.

theguardian.com/technology/202

distributing software as flareware (license condition: evolve an eevee to flareon)

It's been a while since I did these and I still get requests for them so.. IKEA sheets are back! They're £20 and make a great gift or a fun thing for your profile! Examples here imgur.com/a/sa1yGhn
Comment or DM me for a slot!
Boosts very much welcomed!❤️

Got this Ikea-style ref sheet from @moon :3 Check 'em out if you want one for yourself :)

#furryart #snep

Watching a mutual ask for printer recs and receive a chorus of tired tech folk going "Just get a Brother, they're fine" and man

MAN

Like this in actually kinda fascinating honestly, Brother is now the best printer brand, the one that every Computer Person recommends, and is it because their printers are good? Their printers are fine, they print, whatever, no, it's because everybody else's printers have gotten Innovated out the wazoo, every innovation making them way worse, until it's gotten to the point where I wouldn't have one in the house even if it were free, and meanwhile Brother's have remained consistently Fine I Guess, which now makes them the best printer manufacturer simply by virtue of them opting out of the Who Can Get Crappiest Fastest race

Brother have gotten to where they are now, by NOT innovating

new fursona in the works... trying to realistically fit 90% of my favorite character design traits into her. She hasn't told me her name yet though #furry #furryart

rare dragongirl mia! I’ve had a hard time connecting with this character for a while, but this? this finally feels like me, and I love it. and it only took two years of painstakingly redesigning her

🎨 twitter.com/cerberusnoise

Show thread

two of me, *two!*

growing up, I always felt like every furry I’d hang out with had a summery piece wearing an orange sarong, done in copic marker. …that sounds incredibly specific and yet I remember it as ridiculously popular

and now, so do I! look at this, past me, I finally got one!

🖼️ @Zwiebelprinz@mastodon.art

Show thread

This is entirely the fault of @gardevoir (today) because I've been crushing on their dragon girl! 💜

Show thread

Monday morning Renamon thoughts: I should make my dragon sona a girl.

Show older
Computer Fairies

Computer Fairies is a Mastodon instance that aims to be as queer, friendly and furry as possible. We welcome all kinds of computer fairies!