Eric Lucas via plug on 12 May 2022 18:38:39 -0700


[Date Prev] [Date Next] [Thread Prev] [Thread Next] [Date Index] [Thread Index]

Re: [PLUG] Medical Open Source Problem, Nvidia open source


"The problem with risk is that it is so tempting to just accept it.
The risk of a catastrophic problem is low enough that companies can go
on for years without suffering one."

Absolutely true. Also known as the "Black Swan". 

The poster child for this thinking is.... https://en.wikipedia.org/wiki/Space_Shuttle_Challenger_disaster

Eric Lucas

 

On Thu, May 12, 2022 at 9:22 PM Rich Freeman via plug <plug@lists.phillylinux.org> wrote:
On Thu, May 12, 2022 at 1:52 PM jeffv via plug
<plug@lists.phillylinux.org> wrote:
> Ransomware is a perfect example. It's an epidemic now, yet so many just
> don't care or can't spare resources or won't patch or.....
> It's in the news. A 150+ year college just shut down, ransomware being
> the final straw. Hospitals (1 death). Entire cities. Knowledge of it
> isn't hiding.
>

The problem with risk is that it is so tempting to just accept it.
The risk of a catastrophic problem is low enough that companies can go
on for years without suffering one.  Managers are always under
pressure to save money, and it is hard to justify spending based on
avoiding a problem that the company has never experienced.

It can be really tempting for a manager to just take their chances and
9 times out of 10 they'll get a new job before their decisions cause
serious problems.

Maybe the fact that these attacks are becoming SO common is actually a
good thing, because companies will be less tempted to just ignore it.
You get a more robust system if you constantly expose it to attacks,
as long as those attacks aren't so duplicative that they lead to a
false sense of security.

--
Rich
___________________________________________________________________________
Philadelphia Linux Users Group         --        http://www.phillylinux.org
Announcements - http://lists.phillylinux.org/mailman/listinfo/plug-announce
General Discussion  --   http://lists.phillylinux.org/mailman/listinfo/plug
___________________________________________________________________________
Philadelphia Linux Users Group         --        http://www.phillylinux.org
Announcements - http://lists.phillylinux.org/mailman/listinfo/plug-announce
General Discussion  --   http://lists.phillylinux.org/mailman/listinfo/plug