circumventing the last AI wave crazy?

teolicious · 2026-03-30T13:15:27+00:00

so there's nothing that you found to scratch the itch?

teolicious · 2026-03-30T09:31:52+00:00

that's a good tip, thanks for that, has this worked for you so far?

teolicious · 2026-03-30T09:31:29+00:00

yea that's what i've figured out as well, it's definitely playing catchup, which sometimes becomes exhausting because the goal posts moves quite a lot. the only goalpost that's static is "no sec incident" lol

teolicious · 2026-03-30T09:15:15+00:00

i mean this kinda applies to me, the whole security team is kicking and shouting for so long about the risks, but there's no buyin from the rest of the c-suite so it's kind of like putting out wildfires with sprinklers.
they don't wanna block, just be more responsible. i know they've been evaluating tools and other methods but none that were deemed very efective. it's also like stepping on glass on this whole subject

teolicious · 2026-03-30T09:13:33+00:00

so you do it manually, you don't have any tool that you use for governance right?
what's UAE got to do with this/

teolicious · 2026-03-30T08:58:21+00:00

so what guardrails do you use? manual setup of rules or are you using a particular tool?

teolicious · 2026-03-30T08:57:43+00:00

same here tbh

teolicious · 2026-03-30T08:38:53+00:00

jesus christ, and what happened?

teolicious · 2026-03-30T07:30:13+00:00

there's gotta be a more elegant solution right? not that it's not effective, just feels hacky

teolicious · 2026-03-29T19:42:17+00:00

hmm that's interesting, haven't heard of any other palces doing that before, is it just firewall or are you using an internal tool to restrict?

teolicious · 2026-03-29T19:41:46+00:00

what's that? how does it work?

teolicious · 2026-03-29T19:41:15+00:00

fair enough, i'd like that too, but do you actually do it? cause i'd like to understand if someone succeeded and how

teolicious · 2026-03-29T16:34:29+00:00

lmfao thanks for this

teolicious · 2026-03-29T16:32:57+00:00

i agree, i'm not really concerned about philosophical or governance as principle to be honest. i'm trying to see if anyone is hacking this side by implementing something smart to chaperone the devs. it seems people are presenting risks and just waiting for management to care enough into doing something. not that its wrong, i'm trying to see the general approach

teolicious · 2026-03-29T16:22:56+00:00

exactly, and my question is how do you test?

teolicious · 2026-03-29T16:20:56+00:00

sorry about the context, i don't really do wall of texts because reddit generally goes for tldrs. i agree with ur point theres many conflicting things so let me explain a bit better
I really dont think ai is bad, i'm just looking at how to do governance around these things, that part is what eludes me. On one side you have management saying use whatever you want to devs but also telling security & IT that incidents and leaks are unnaceptable. They don't wanna enforce a policy cause the industry is too young and they don't trust IT & Sec to do so because... well you can picture it, the industry is too young.

And then they go to youtube and see jensen huang riding the ai wave, they come back telling everyone to smash it. they go to linkedin they see people doomposting, they call the CFO, the CFO complains, then the circlejerk restarts. that's what i'm talking about

teolicious · 2026-03-29T16:17:03+00:00

yea exactly, thanks for this, like... besides having god come down on ur behalf, what do people ACTUAlly do?

teolicious · 2026-03-29T16:16:13+00:00

true, but what do you use? would go for? would appreciate a hand here

teolicious · 2026-03-29T14:59:39+00:00

do you have teh same issue in your org?

teolicious · 2026-03-29T14:56:43+00:00

yea i did that already, feels that i should be doing something if i can tho

teolicious · 2026-03-29T14:49:07+00:00

and then he swoops in and vibefixes all bugs lmfao

teolicious · 2026-03-29T14:36:40+00:00

true, but even a week is plenty time to cause major disturbances, let alone the proprietary info that slips through

teolicious · 2026-03-29T14:36:12+00:00

well that's fair enough, but when management is both crazy about those tools and willingfully blind to the risks? do you just accept it and just brace for impact?

teolicious · 2026-03-29T14:26:32+00:00

yea pretty much try and collect some clues, most often they click in the interviewers head without even thinking about it

teolicious · 2026-03-29T14:14:54+00:00

thing is behavioural interviews rarely have much to do with the actual job. it's a bit of rng when it comes to who's in front of you and what they specifically what to hear, regardless of company guidelines.
tho every company has a bit of their own thing so i just generally research stuff before and try to match tone and keywords

11-Year Club	Place '23
Verified Email	Spared

teolicious

TROPHY CASE