BrandoElFollito

0 Followers
0 Following
2 Posts
Thanks to a helpful comment, I discovered after 10 years that

> i can't believe i'm writing a reply to a guy whose name is broken spanish for 'brando, the little fuck'. (literally. there isn't an alternative interpretation.)

Cool, I had no idea.

---

I love the summary done by https://hn-wrapped.kadoa.com/BrandoElFollito?share

Profile Summary
A French ex-physicist turned tech enthusiast who brings a unique European perspective to discussions. Maintains a substantial self-hosted infrastructure while regularly contributing insights on topics ranging from quantum mechanics to cooking. Known for pragmatic approaches to technology and occasional cultural observations about France.

Roast
Claims to be French but hasn't mentioned surrendering once - suspicious!
Has a PhD in physics but still can't figure out why YAML indentation is important
Watches hoof trimming videos despite seeing a real cow only twice - peak urban programmer moment

(the mention about France was mean, though)

Aaaaaand, a wrap of the wrap! https://hn-wrapped.kadoa.com/BrandoElFollito?share
This account is a replica from Hacker News. Its author can't see your replies. If you find this service useful, please consider supporting us via our Patreon.

Officialhttps://
Support this servicehttps://www.patreon.com/birddotmakeup

Yes, I know it first-hand.

At least in cybersecurity, there are no certifications that "certify" that you are secure. There are plenty of them that will assess your processes, their execution, etc., but the reality of the risk is next door. This is typically the case for ISO 27001, which has ISO 27002 (the ex British Standard from the 90s) that theoretically governs the controls you should have in place. But it simply does not work.

When you have a major leak, this is usually a company with half a page of certifications, but, hey, mistakes happen. The key problem that these mistakes come from is a fundamentally wrong approach to cybersecurity, but nobody cares.

There is no relation between checking a box and becoming legally responsible for the vast majority of certifications.

The company may be legally in troble if the planets are aligned but that's all.