If the goal is to exfiltrate data, I guess it is. If the goal is to make the people working in the FBI feel vulnerable - and pushing out this sample data would suggest that it is - I don't think it is. You could probably do the same with data from social media sites and data brokers.
It doesn't do nothing. It does make things somewhat harder to attack.
There was a time, 25-ish years ago, where exploits were thrown about like candy at a parade. The procedures you mention, along with other things, have made zero-days like these more valuable than gold.
Anyone that signed an Oracle contract has volunteered as a hostage, though, so you have to negotiate with both the hostage-taker and the hostages. Stockholm-syndrome-esque.
I think enterprise software in this vein used to have a quasi-monopoly due to the sheer work required to build software of its size (not enough engineers exist in the government to do so), and the difficulty for competitors to enter regulated markets and so pretty much 1-2 options to choose from.
AI now makes it possible to build this kind of software in-house, offering a 2nd choice, though it'll only be as good as the standards of the teams using it. Only time can tell.
Enterprise software is complicated mostly because of number of customers it can support.
Bespoke software can be orders of magnitude less complex. There are many reasons companies choose to use vendor solutions, but for large organizations it’s usually not “we literally can’t hire enough engineers to build it.”
> Bespoke software can be orders of magnitude less complex.
Not in government. For payroll/HR, we're talking about hundreds of pages of legislative mandates, union bargaining rules, Title 5 statutory compliance, and FISMA/NIST regs. Just customizing something like PeopleSoft to fit is a large task in itself, let alone trying to implement bespoke software using an engineering pool that isn't even large enough to modernize the software it currently owns.
Bespoke sounds nice and works well in startups but that's not the context we're discussing. Check out Phoenix Pay: https://en.wikipedia.org/wiki/Phoenix_pay_system and understand the US is even more complex.
I’ve worked on HR software. There are currently at least 3 large scale, bespoke, homegrown payroll/HR systems in use by the Federal government. There used to be many more. There are many reasons to outsource software but the government can’t hire enough engineers is not one of them. It’s clearly been done before.
>Just customizing something like PeopleSoft to fit is a large task in itself, let alone trying to implement bespoke software
Customizing large enterprise software is more like writing bespoke software than it is what most people think of when you use the word customization. You end up paying enormous vendor margins on top of the costs for something that is effectively bespoke software.
There is so much bespoke software out there that is at least as complex as government payroll software.
Considering how bad most enterprise software is, I assumed the only real relevance was if the sales team ponied up some lavish perks to the right VP who only has to sign checks and never actually interact with the software.
The irony, of course, is that this will likely have a negative impact upon Oracle's reputation, which will have a negative impact upon its value, which will then be resolved with more RIFs.
I doubt it, look at all other breaches over the years.
If anything Oracle will "contribute" a lot to congress people's midterm reelection and in a few months all will be forgotten and Oracle will get more Gov. contracts.
The Fallout TV show probably had to be the final straw for how much independence Bethesda gets to have. Boy, to have been a fly on the wall in that conference room.
"The TV show is doing gangbusters and you're telling me you don't have any F*CKING RELEASES IN THE CAN?!?! Stick Starfield, Todd, you're done with your 'art'."
I mean, I'm not even asking for a new installment, but the TV show is in New Vegas now, and not even a remaster of Fallout: New Vegas? In a world gone mad with advertising, I'm truly shocked that the single tie-in was a remaster of Fallout 4.
Hey, man, like... something's gotta fund the next game.
No, not TES VI. Starfield.
In all seriousness, I've not played Starfield, and I'm sure it's at the very least a serviceable game (at least by my Bethesda fan standards), but regardless, it wasn't the right game to make at that point in time, no matter what Todd thinks.
Prior to the release gap between TES V and TES VI, the longest gap there had been between new mainline games in that franchise was six years. They're now fifteen years deep.
I mean, they released an oblivion remaster last year and it appears they are planning on a fallout 3 remaster, so probably retreading that ground as much as they can.
There will be people who want to host things on-device. At some point, you could probably do most day-to-day tasks with a Siri-like agent, so you don't necessarily need it to be on a datacenter rack somewhere.
More complex tasks being run quickly opens up a choice: insanely beefy individual devices, on-prem hosting, or cloud hosting, whether that be some data center running FOSS models, or ones from people like Anthropic or OpenAI.
Beefy hardware for individual users? Not cost-effective. Could have people share that hardware by putting it in a data center. Do you want to operate that data center? For proven business cases, sure, why not? If you're still working out what your scale will be, maybe you ask the Googles, Amazons, or Microsofts of the world to rent you the hardware so you don't have wasted or too little capacity.
The real question is, how much value is there in a few companies that talk about how their eventual goal is to create AGI as opposed to just giving you enough intelligence to augment your current workers?
The answer is "probably not enough to justify more than one company having a valuation of over a trillion dollars, and that's generous".
30 years doesn't matter; 90 days does. If you can make enough money back over that period by enshittifying the company, you do it, even if that means selling the thing whole.
It used to be that the goal of a company was to compete in a market and gain value through performance in that market over the long term.
In the 1990s, several CEOs, including Jack Welch, realized how exactly things work. Namely, most shares are held by retirement and pension plans who employ entire companies' worth of people to find a way to diversify and hedge, and the reporting period for their earnings is 90 days. You had major chunks of corporate capital held by people who couldn't really care less about anything other than the line going up, and any way to do so within three months was valid.
Once a company has achieved a certain market position, the long-term and non-financial aspects of holding shares (pride in the company, an interest in the market they competed in, etc.) are unimportant, and the customer's opinion stops mattering as much. You can assume that enough customers will stay around through sheer inertia no matter what you do, and that includes breaking up the company and selling it for scrap.
Since most shareholders aren't really attached to any one company's holdings, they plan for customers to leave when companies do anti-consumer things, and if a company is broken up, they just take the earnings per share on that break-up and plow it into something else that sounds like it'd be profitable.
You have to do business with people who are operating in a spot below that market position if you really want them to care about pleasing you as a customer.
I don't bother paying for ad-free versions of any video service. At some point some analyst will say "but you could make $.000000000000001 more per share if you just put in a few ads" and that will be the end of it being truly ad-free.
Is it anti-consumer? Absolutely. Is finding ways to cut-in ads in a service marketed as "ad-free" arguably fraud? Yes. Does any of this matter so long as number go up and retirement funds keep raking in the money? No.
If the goal is to exfiltrate data, I guess it is. If the goal is to make the people working in the FBI feel vulnerable - and pushing out this sample data would suggest that it is - I don't think it is. You could probably do the same with data from social media sites and data brokers.
reply