缺乏系统测试导致安全漏洞与数据泄露
问题概述
帖子讨论了许多关键系统未经过可靠测试，导致漏洞难以被发现、数据泄露频繁，并迫使人们依赖补丁式解决方案。评论者进一步指出政府机构数据泄露、对AI安全的忽视以及缺乏必要的安全隔离技术（如数据二极管）等具体痛点。
痛点标签
- 系统缺乏可靠的测试流程
- 政府机构频繁泄露他人私人数据
- 对AI安全和安全测试的忽视导致潜在灾难
待验证问题
- 这些系统是否真的缺乏可靠的测试流程？
- 政府机构是否真的频繁泄露他人私人数据？
- 是否有明确的替代方案或工具被用户抱怨缺失？
证据
原话 · @Anonymous
The Work Number is an Equifax (who famously had a massive data breach a few years back) owned database with employment and pay information. You can create a login on theworknumber .com and pull your report. Mine is seventy four pages and had info from every company I've worked at in the last 13 years including every paycheck I had received with the exact dollar amount (both net and gross) and hours worked. It has employment start/end dates, termination reason, details about withholdings, benefit enrollment, union affiliation, etc etc etc. This data is sourced directly from the HR platform
原话 · @Anonymous
Every since the OPM hack of 2015, I've been apparent to me that my former field of IT administration has lost the plot. Nobody knows what a data diode is, or why you would use one. Systems that should clearly be air-gapped aren't. While it's easy to lay this at the feet of AI getting better at hacking. I see it as primarily an IT issue. We've collectively ignored the lessons of history, and made do with patch jobs over poorly chosen operating systems instead.--We need air gaps, data diodes, and capability based operating systems. Now that I'm retired, when I have the energy, I'm working on the data diode part. This weeks lesson for me, personally, as I try to build an open source data diode, is that the Waveshare RP2350-ETH is a horrible choice for a proxy/data source/sink, as t
原话 · @Anonymous
Is it just me that has a constant dribble of other people's private data coming to me from government agencies? This year, I've had the UK variously send me someone else's court summons, someone else's tax documentation (not address error - just inadvertently included as attatchments on emails to me). I've had portugal disclose property taxation information on any subject to me, through a simple enumeration hole. And last week I had brazil's ministry of agriculture send me details on other peoples' livestock shipments. Our information environment is unbelievably porous. There would be no secrets from an unshackled AI.
免责声明：本卡片由 AI 从社区讨论中提炼，属于「痛点证据」，是需求分析与验证的起点，不等同于「已验证的市场需求」。AI 存在分析局限，关键决策前请打开上方原始讨论人工复核。