RE: https://infosec.exchange/@haroonmeer/116302199884409478

Focusing not on what will work, but what will sell.

@wendynather

alas, that our industry runs on money rather than on ....anything else.

@wendynather I think that this is at least partly because there appear to be very few consequences for making and selling products that don't work. By the time the implementation is done and people notice it doesn't work, the person who signed the contract has moved on.
@evacide Also, it’s very hard to define unequivocally what “work” means. “You must have configured it / prompted it wrong.”
@wendynather @evacide 2026 version of "it works on my machine"

@wendynather @evacide

"You're holding it wrong" was just part of a trend.

@wendynather @evacide very few customers put terms in the contract about the product working as promised in the marketing materials. It's one of the things I press on in TPRM. Not that I'm always listened to, but there's only so much I can do.

In the end I tell them it's their decision to make, but they won't be able to claim ignorance later. 🤷

@evacide @wendynather ibg ybg - motto of Wall Street ( I’ll be gone, you’ll be gone)

@wendynather its 18y since Ian Grigg described ‘The Market for Silver Bullets’. Plus ça change.

https://iang.org/papers/market_for_silver_bullets.html

The Market for Silver Bullets

@wendynather

This is the Munger rule in full effect. Behaviors can be predicted by incentives. Has always been, will always be. Promises made meet sales quotas, not promses kept.