bloomberg on supermicro: sky is falling

Wed Oct 10 07:57:50 UTC 2018

Hey,

> Important distinction; You fire any contractor who does it *repeatedly* after communicating the requirements for securing your data.
>
> Zero-tolerance for genuine mistakes (we all make them) just leads to high contractor turnaround and no conceivable security improvement; A a rotating door of mediocre contractors is a much larger attack surface than a small set of contractors you actively work with to improve security.

+1.

Changing people is a cop out, and often blame shifting. Believing you
have better people than your competitor is dangerous. Creating
environment where humans can succeed is far harder than creating
environment where humans systematically fail.

-- 
  ++ytti