Wendy Nather on Nostr: Okay, could someone explain something to me please? Why did ANYONE ever think ...
Okay, could someone explain something to me please?
Why did ANYONE ever think “guardrails” would work?
We all know that blocklisting is suboptimal because you can’t possibly enumerate all the badness (see also: antivirus). And anyone who has had to write a statement of work that includes application security requirements knows how impossible THAT is without adding a whole textbook as an appendix. (Or just writing “Don’t do stupid shit with the code,” which covers it pretty broadly.)
Don’t do that. Or that. Or that, either. And not like that. Oh, we didn’t know you could do that! Don’t do that.
Seriously, why??
Published at
2026-06-15 19:41:39 UTCEvent JSON
{
"id": "f698238481da80c9cac4f25e21264a39b68a489803acd14a4afae93203763d51",
"pubkey": "e36656c054b9b95ed8c895bc03f4d146a5be4bbddf47cb58cb7975b919676741",
"created_at": 1781552499,
"kind": 1,
"tags": [
[
"imeta",
"url https://media.infosec.exchange/infosec.exchange/media_attachments/files/116/755/818/059/565/472/original/d4bf3282a4c68643.jpeg",
"m image/jpeg"
],
[
"proxy",
"https://infosec.exchange/@wendynather/116755824606156591",
"web"
],
[
"proxy",
"https://infosec.exchange/users/wendynather/statuses/116755824606156591",
"activitypub"
],
[
"L",
"pink.momostr"
],
[
"l",
"pink.momostr.activitypub:https://infosec.exchange/users/wendynather/statuses/116755824606156591",
"pink.momostr"
],
[
"-"
]
],
"content": "Okay, could someone explain something to me please?\n\nWhy did ANYONE ever think “guardrails” would work?\n\nWe all know that blocklisting is suboptimal because you can’t possibly enumerate all the badness (see also: antivirus). And anyone who has had to write a statement of work that includes application security requirements knows how impossible THAT is without adding a whole textbook as an appendix. (Or just writing “Don’t do stupid shit with the code,” which covers it pretty broadly.)\n\nDon’t do that. Or that. Or that, either. And not like that. Oh, we didn’t know you could do that! Don’t do that. \n\nSeriously, why??\nhttps://media.infosec.exchange/infosec.exchange/media_attachments/files/116/755/818/059/565/472/original/d4bf3282a4c68643.jpeg\n",
"sig": "219e7d9d5cd3497ffecedfefd61096fac3a86fcc49a26f2887fb36a684f4ff70b918bc4774e0a253b5acb1684c56a37bee37dad02fb8ad49d65bad9fc24b6f71"
}
