Lack of System Testing Leads to Security Vulnerabilities and Data Leaks
Problem
The post highlights that many critical systems are never properly tested, resulting in undetected vulnerabilities and frequent data leaks, forcing reliance on patchwork fixes. Commenters also point to government data mishandling, neglect of AI security testing, and the absence of essential isolation technologies such as data diodes.
Pain points
- Systems lack reliable testing processes
- Government agencies repeatedly leak private data
- Neglect of AI security and testing creates potential disasters
Questions to verify
- Are these systems truly lacking reliable testing processes?
- Do government agencies really leak private data frequently?
- Is there a clear alternative solution or tool that users complain is missing?
Evidence
quote · @Anonymous
The Work Number is an Equifax (who famously had a massive data breach a few years back) owned database with employment and pay information. You can create a login on theworknumber .com and pull your report. Mine is seventy four pages and had info from every company I've worked at in the last 13 years including every paycheck I had received with the exact dollar amount (both net and gross) and hours worked. It has employment start/end dates, termination reason, details about withholdings, benefit enrollment, union affiliation, etc etc etc. This data is sourced directly from the HR platform
quote · @Anonymous
Every since the OPM hack of 2015, I've been apparent to me that my former field of IT administration has lost the plot. Nobody knows what a data diode is, or why you would use one. Systems that should clearly be air-gapped aren't. While it's easy to lay this at the feet of AI getting better at hacking. I see it as primarily an IT issue. We've collectively ignored the lessons of history, and made do with patch jobs over poorly chosen operating systems instead.--We need air gaps, data diodes, and capability based operating systems. Now that I'm retired, when I have the energy, I'm working on the data diode part. This weeks lesson for me, personally, as I try to build an open source data diode, is that the Waveshare RP2350-ETH is a horrible choice for a proxy/data source/sink, as t
quote · @Anonymous
Is it just me that has a constant dribble of other people's private data coming to me from government agencies? This year, I've had the UK variously send me someone else's court summons, someone else's tax documentation (not address error - just inadvertently included as attatchments on emails to me). I've had portugal disclose property taxation information on any subject to me, through a simple enumeration hole. And last week I had brazil's ministry of agriculture send me details on other peoples' livestock shipments. Our information environment is unbelievably porous. There would be no secrets from an unshackled AI.
Disclaimer: this card is distilled by AI from community discussions as “pain point evidence”. It is a starting point for need analysis and validation, not a “validated market need”. AI has analytical limits; please open the original discussion above to manually verify before key decisions.