My email is on many such lists, I never ever would contact someone who spams. Just no.

I also have all tracking pixels blocked, so you would not know I’ve opened.

I hate xml.

2. Google can afford to push the frontier as long as it brings more money. They’ve been investing in AI way before others.

Our system is pretty well tested, so this helps a lot.

I know most people at my company use it, and with pretty good results(?)

Personally, I stoped voluntarily reviewing code and caring about quality of code that I’m not responsible for. The AI slop is real and reviewing it is counter-career, instead of pushing product forward and getting praised you spend it fighting with AI. I just accepted that this is how the products looks these days.

But that was the same thought for me. The other totally missed aspect: a fire kills all life in area.

A recurring theme emerged: while organizations with sensitive or high-value databases are generally well-protected on the perimeter, most lack effective ways to monitor and respond to suspicious activity by already authorized users. The solutions that actually work (eg. DSBMs) are typically bundled, expensive, cause slow-downs, and drain resources. Among those we interviewed, only about 5% felt that they have this issue solved.

Based on these insights, we developed a PoC that, through a database gateway proxy, can already perform full packet inspection. For now, the behavioral analysis is mocked up, but once fully implemented, the tool will be able to detect anomalies in baseline database traffic and respond to incidents effectively and with no trade-offs. We’ve demoed it to a few companies, and initial traction has been promising. However, we worry that this positive feedback could be a fluke—perhaps due to our small sample size or a bias toward regions with maturing cybersecurity markets. To be candid, we’ve also had trouble reaching US CISOs, even with warm intros, which is concerning.

So, before moving forward, we figured we’d try to broaden this research, and we’d appreciate any input from CISOs out there:

1. Do you consider insider data access a risk to your organization’s databases?

2. Have you already tried addressing this risk (if so, how), or is it a high priority on your to-do list (if not, why)?

3. Which solutions are you familiar with, and what budget would you consider for tackling this issue?

Comments URL: https://news.ycombinator.com/item?id=42086007

Points: 2

# Comments: 0

If EU would introduce such legislation, it could potentially make software doing end2end encryption illegal. In such case, google would be removing it from EU Play Stores, and this would be more/less end of such messaging apps unless they comply. :-)

This is why it's important to have a reasonable legislature and laws.

> Chat control - one of the worst EU plans that is also being described as a surveillance monster - must be stopped. And the EU Parliament has just decided to do so! In a historic agreement on the EU Commission's Child Sexual Abuse Regulation (CSAR) the European Parliament wants to remove chat control requirements and safeguard secure encryption. The decision came after extensive backlash against the original proposal from technology and security experts, to international scientists and to citizens across Europe. This is a great win for our right to privacy and for upholding our democratic values in Europe, but the fight continues!

What did the EU Parliament decide?

Breyer writes on his website that internet services and apps must be "secure by design and default". The EU Parliament has agreed to:

    "safeguard the digital secrecy of correspondence and remove the plans for blanket chat control, which violate fundamental rights and stand no chance in court. The current voluntary chat control of private messages (not social networks) by US internet companies is being phased out. Targeted telecommunication surveillance and searches will only be permitted with a judicial warrant and only limited to persons or groups of persons suspected of being linked to child sexual abuse material."

In contrast to the original chat control proposal, the version of the EU Parliament wants that a new EU Child Protection Centre proactively searches publicly accessible parts of the internet for child sexual abuse material with automatic crawling, which can also take place in darknet and would be much more efficient than private surveillance measures by providers. Found abuse material must be reported and taken down by the provider. Fight is not over

While the EU Parliament's decision is a huge win, the fight is not over. It is expected that the EU Commission will continue to push for general surveillance chat control measures. Now is the time for each and everyone of us to join this fight!

Comments URL: https://news.ycombinator.com/item?id=38261415

Points: 560

# Comments: 214

Did you receive your 'search not found' badge?