pivot

@WPalant@infosec.exchange If I understand right, the developer found hard coded credentials being used to connect from his instance to the vendor. I think at that point, he has no reason to believe that using those credentials will give him access to anything other than his own data. As soon as he saw otherwise, he backed out and did responsible disclosure. Two thoughts: This will have chilling effects on responsible disclosure (perhaps the goal).If you give me the credentials needed to access a dataset, I don't think you should be able to claim the existence of those credentials as an access control meant to keep me out.

@bert_hubert@fosstodon.org I agree on Just Six Numbers, though I suspect that the James Webb telescope's new data and the resulting Hubble tension are going to make it outdated in the next decade. Exciting times there. Opportunities for more books 😃

@bert_hubert@fosstodon.org Organizational Ecology by Michael T. Hannan and John Freeman is sociology, addressing the lifecycle of businesses and other organizations. Structural Holes: The Social Structure of Competition by Ronald Burt is also sociology, focusing on the individual person's place in a competitive world, and the nature of interpersonal power. I see you have the Feynman lectures for physics, and I second that. I don't think I'd describe any of the other texts I've encountered in that field as totemic. Maybe Sears for thermodynamics - not Sears and Salinger, the older one.