Pinned post
As painful as the next months will be and as new as this deluge is to many, this is decidedly a healthy thing and good in the long run. There is light at the end of this. 🙏
Code lives much longer than anyone ever intended. Part of the reality is new tools for identifying risk become available and force revisiting that old code and making it better in the face of bad actors. The new tools are always a step function in discovery. As Stephen J Gould wrote, "change happens in long periods of stability (stasis) interrupted by short, rapid bursts of major transformation."
We are in the midst of such a major transformation.
This is not unlike other engineering where a significant (negative) event happens that forces a review of procedures and architectures that were thought to be reliable. The first time going through this is extraordinarily difficult. But in the end, "to engineer is human" as the wonderful Henry Petroski wrote in describing this cycle of learning from the discovery of failure.
The internet has been through these crises of architecture before. The volume seems to double each time and the amount of work rises at least as much. This is a direct result of the internet itself—connecting everyone and every device means everything that happens, good or not, happens at twice the scale and half the time as it did before.
🙏🙏🙏
Code lives much longer than anyone ever intended. Part of the reality is new tools for identifying risk become available and force revisiting that old code and making it better in the face of bad actors. The new tools are always a step function in discovery. As Stephen J Gould wrote, "change happens in long periods of stability (stasis) interrupted by short, rapid bursts of major transformation."
We are in the midst of such a major transformation.
This is not unlike other engineering where a significant (negative) event happens that forces a review of procedures and architectures that were thought to be reliable. The first time going through this is extraordinarily difficult. But in the end, "to engineer is human" as the wonderful Henry Petroski wrote in describing this cycle of learning from the discovery of failure.
The internet has been through these crises of architecture before. The volume seems to double each time and the amount of work rises at least as much. This is a direct result of the internet itself—connecting everyone and every device means everything that happens, good or not, happens at twice the scale and half the time as it did before.
🙏🙏🙏
3% of “critical” software security bugs, in all of recorded history, have been found in the last month.View quoted post on X
This is on pace to find another ~100,000 bugs this year alone, adding ~26% more vulnerabilities to the all time total
Do you realize how fucking insane that is?
