@nobody If I didn't feel like a truck ran me over - I'd be half tempted to dig up meta to see it

I wonder how that feels like

Should I go find out?

Not literally

I fell asleep during work, and slept through most of my shift :D

One of my team mates elsewhere didn't realise I was in (I'm usually very loud on work chat) and at the end of the day was "Oh...you were in?"

lol :D

I hope you don't work at the sort of place that fires people for sleeping

What is your job BTW?

Well in theory!

I'm a monitoring engineer

I stare at screens and yell at people when things break

and do 20,000 little pointless things that should be automated

That sounds fun :)

Oh hell no

The yelling part...

Not the fun sort of yelling

the My hair is on fire yelling

@JourneymanGeek Automate them and lighten your workload?

FBI Honeypot phones lol: tadviser.com/index.php/Product:Arcane_OS

I saw those a while ago

I just found out ... you'd think any criminal looking for a "secure" phone would check its security in some way and not let a product like that propagate but people are stupid

people aren't stupid... people cannot vet for every single piece of component of their lives

you trust the water company, you trust the motor oil you are using is actually good, you trust the prime numbers selected for your TLS connection...

@ThoriumBR If you are buying a phone explicitly for security purposes, at a markup, with which to do sensitive communication, that's something worth vetting by any competent individual

@ThoriumBR That is true. Supply chain will get us all :)

they just had no way to prove it was really secure...

Checking for suspicious comms may have worked

well, that's difficult to say the least...

I myself don't know who my own phone is talking to...

I can do it, but it take a lot of effort and I know where to look...

asking a drug dealer to do the same is like asking me to identify if the pile of white stuff on the bag is cocaine, flour, calcium carbonate or powdered milk...

Fair. They could get someone else to do it I suppose. My point is that out of the hundreds if not thousands of people that ran that OS, it wasn't really questioned until average consumers that bought them off of ebay or whatever started talking about it on XDA and such

I would believe the FBI did a good job hiding the clues

heck, the NSA ran a crypto company for years on Switzerland and nobody noticed!

Crypto AG "made millions of dollars selling equipment to more than 120 countries well into the 21st century. But what none of its customers ever knew was that Crypto AG was secretly owned by the CIA in a highly classified partnership with West German intelligence. These spy agencies rigged the company’s devices so they could easily break the codes that countries used to send encrypted messages."

you would think the countries buying Crypto AG machines were inspecting them to see if they were backdoored and found nothing... and yet they were

Ooh so complacency extends not only to individuals but organizations

surprise surprise

some times it's complacency, sometimes you don't have the skills to see something wrong even if your life depend on it...

if you have some time to kill, look at the "Underhanded C Contest"

I have, it's brilliant

I love how C can be manipulated

yes, it's brilliant

and even if you know the programmer is hiding something AND you have the source code it's difficult to find where and how...

now imagine not having the source code and trusting the programmer

So much of the world hinges on whether our methods to curb malice are effective enough

or the fear of reputation damage on the authors of anything

Giving value to reputation is one of those methods imo