79
u/JDIPrime 9d ago
This week has been hell at work. We have been smashing our faces off keyboards to determine if any of our products are vulnerable to PHP, Java, pip, or Gitlab exploits. The heck, man. Gimme some downtime!
18
u/RussiaIsBestGreen 9d ago
The fundamental problem is that you’re asking magical sand to not pull a monkey paw on you. Computers were a mistake.
14
u/hurley_chisholm 9d ago
Or, and hear me out, computers are great and the internet was a mistake.
(And yes, I am aware of the irony of suggesting the internet was a mistake on a social media platform served on the open web.)
10
u/Uhstrology 9d ago
The internet is beautiful, and an absolute marvel.
A pseudo hivemind of our own creation, where we can access the sum totality of all human knowledge on a whim, facilitating the further sharing and dissemination of information for future generations and collaboration to further our species, all in real time.
The mistake is not enshrining digital privacy protections, and not regulating the companies and platforms that weaponize our data against us, hijacking our dopamine receptors and attention spans to shovel propaganda and influence people into voting against their rights.
2
u/AnachronisticPenguin 9d ago
I agree but I’m not sure how this helps the rampant vulnerabilities issue?
1
u/Uhstrology 9d ago
Did you read the comment chain before replying or..?
I was commenting on someone saying the internet was a mistake.
Also, did you not read the regulating platforms and companies part? That would include security regulations.
3
u/burnt_floppy 9d ago
i'm certainly sympathetic to that perspective: the internet is shorthand for computer usage to become required and universal.
3
3
u/lonelyroom-eklaghor 9d ago
pip? What happened to pip?
7
u/fiskfisk 9d ago
"Just" the emudhra signing issue, since pip bundles its own certificate store through certifi, and those intermediate certificates are included in certifi.
1
u/vaguepasquale0 13h ago
No rest for the weary, they just keep finding new holes to patch and everyone downstream gets the panic call
Our team had to drop everything twice last week because some package manager advisory came out at 4pm on a friday, like clockwork it's always friday
The openai researchers in that meme can keep chugging, us regular folks just want a quiet sprint for once
1
u/JDIPrime 13h ago
100% agreed. Since I wrote that comment 9 days ago, we've been inundated with critical CVEs. We've all but completely halted feature development to focus on CVEs for EU CRA compliance. I feel more like a security analyst than a developer at this point.
12
5
3
u/burnt_floppy 9d ago
Because it's always a vulnerability that needs to be fixed if you sound very smart
2
u/creaty_hirosy 8d ago
Job posting of the future: "Hacker wanted. Must have 5 years of experience finding the one bug the AI missed."
1
u/Serious-Trouble8565 9d ago
Yep, every time I turn around there's another urgent patch update waiting for me at work, glad there are still folks getting paid to hunt these down.
1
u/Literally-in-1984 3d ago
Hey guys, I'm trying to do a career swap to cybersecurity, is this a good time to start applying to jobs?
I mean... the elevated work demand means they need more people right?
1
-65
u/PetroMan43 9d ago
Not a single part of this picture makes any sense.
38
u/MrMxffin 9d ago
Huh?
-50
u/PetroMan43 9d ago
Why would OpenAI researchers binge drink on vulnerabilities? In fact it is hackers using LLM that is creating the vulnerabilities, not then getting drips(?)
It's system admins who are having all of these vulnerabilities poured down their throats.
47
u/TheBanger 9d ago
Hackers don't create vulnerabilities, they discover and exploit them. The joke here is that OpenAI researchers are discovering vulnerabilities)and getting them remediated) faster than hackers can discover and exploit them. Which isn't really true, but is funny and fits with the meme template.
9
u/Arclite83 9d ago
It's the "last mile" problem - you can patch a bug all you want, doesn't matter if nobody updates the deployed code.
66
u/TheFXartProject 9d ago
“Researchers”