Marius Kießling

@benjojo what’s a bit concerning is this current update: „DENIC eG is currently experiencing a disruption in its DNS service for .de domains. As a result, all DNSSEC-signed .de domains are currently affected in their reachability.“ That’s actually downplaying the impact. All DNSSEC-verifying resolvers cannot resolve DE domains. Even non-signed zones are affected.

@GossiTheDog Even *if* the word prediction box is now capable of findings vulns by throwing massive compute at the problem (leaving all the problems with this aside), you still need to get people to fix their shit. Like have they ever looked at what it takes to get a company to just patch their god damn network edge devices?

@jukkan @davidgerard great, more broken shit in Teams

@Npars01 from experience, we can even leave out the nepotism and just trace it back to incompetence within the management team

@neverpanic that has also been our conclusion when we recently re-evaluated the need for DNSSEC. The threat of fucking up outweighs the threat mitigations we would largely get from DNSSEC.

@saraislet@infosec.exchange @mjg59@nondeterministic.computer I think that this is deeply ingrained in the current push for AI. In addition, there seems to be a general distaste of those who push AI for honing skills and for those who possess them. This video by Dr. Angela Collier summarises this pretty well while focusing on the usage of „AI“ in the context of physics: https://youtu.be/TMoz3gSXBcY