tr0ut

I asked because I've heard more than once that a company either stretched the truth or outright lied on these questionnaires.

So stretching the truth could be:

Do you adhere to NIST?

The truth could be: "well not exactly but that's on our roadmap,we do somethings that are close enough." That would get a 'YES' check.

Or something like end to end encryption. The answer could be a 'YES' because a company uses front-end TLS and pretends to not completely understand the ask.

In this case it is mostly the business either forcing security to bs or another group (Sales?) filling out the response untruthfully because they are loosing revenue if they're honest.

Are there any legal issues if one were to be untruthful/lie on security questionnaires?

I certainly was not trying to argue that. And I said it was my own experience (serendipity). I also agree with what you're saying.

I could certainly see that happening. But I would lump them in with being educated. Since they most likely did do a 9-5 4-5 days per week bootcamp (assuming). I've encountered people with masters degrees unable to do very basic development. Understanding all the jargon but not able to perform anything beyond basics. Some how these people survive in some businesses. Staying under the radar.

anecdotal disclaimer -- I think I've worked with more brilliant people with no degrees or uncompleted education. They just had more drive and do not let anything hold them back. They do not need to be told what to do. Not saying that the rest of the people that I worked with 9.8/10 that had degrees were not great. Just there was something positively different about the people I encounted without it.

Great post! I have yet to try Linux on the Go. So thank you for sharing. I'm also a huge fan of the Go.

Since you posted this exact statement a dozen times. Could you answer, What exactly is the benefit for white people to be racist to black and brown people?

This was great, bravo! While I am not necessarily the audience intended. I've been following some Notebook development. I have always thought of it as convoluted and pedantic. I don't mean to distract from some very solid and well intentioned work. Just that it added a layer of complexity and turned out not to be as portable as advertised.

Looks like all the enterprise Linux distros to me? I wouldn't qualify Arch for that purpose.

Please stop repeating this. Its just not completely accurate. I keep hearing it from people. First asbestos has been in use for a long time. Still to this day before anything to do with Trump. What has been happening is the number of companies that produce or use it have greatly declined. Due to legal issues. Second not all asbestos is created equal. Some of the fibers are completely save for there intended purpose. There are many studies that argue claims that it is the direct cause of illness. We really don't know. The people at the greatest risk and I'm sure this risk is universal for such materials. Are the ones working with it on a daily basis.

I have nothing to do with asbestos nor did I vote for Trump. But the knee-jerk reaction does nothing to inform anyone of reality.

I certainly get it. Zsh and the like offer some really nice functionality missing from standard bash. However that muscle memory is lost. Zsh etc. certainly cool for your own tinker box. Not good when dealing with lots of disparate systems. I don't even like to use a lot of aliases because of this.

I'll except that statement in the sense that it reduces Aikido down to interpretive dance and not (applicable) combat practices.

Aikido is that fantasy martial arts. The kind that only works when the opponents are in on the ruse.

Blockchain is like the Aikido of technology.

There is a security issue with using AD/OpenLDAP. That being passwords. An example is you can debug/trace the SSH process and see(log) passwords in clear text.

Now of course this is both a trust and a escalated privilege issue. But a lot harder(impossible) with keys.

Can you post an example of this? Link works too.