Here's an interesting paper that looks at blood plasma protein contents and uses bioinformatics processes including learned models to identify plausible biofeedback pathways responsible for protein concentrations deviated from baseline. It's not what you are asking for, but it's the closest thing I've seen to date:
Plasma Proteome of Long-covid Patients Indicates Hypoxia-mediated Vasculo-proliferative Disease With Impact on Brain and Heart Function (Preprint)
> In Fig. 7A, hierarchical clustering heatmaps reflect the levels of neurological markers
across the patient groups (markers have been curated by OLINK). The values of the PEA expression levels were hierarchically clustered based on Pearson correlation algorithms. Markers selected through the
above methodology were investigated for functional annotation using tools from the GSEA platform and MSigDB data positories (Fig. 7B). This latest analysis demonstrated that functional clusters were formed
around leukocyte migration, positive immune signals, glial cell differentiation, neurogenesis and MAPK regulatory modules. Taken together, these pathways predict a possible brain-blood barrier
dysfunctionality grounded on cell proliferation. Graphs in Fig. 7C illustrate the expression levels of individual markers from the functional groups presented in Fig. 7B. One of the highly expressed markers, was the amyloid precursor protein (APP; Supplementary Fig. 10) which is known to be a pathognomonic
marker for both Alzheimer disease and brain inflammation [61–65]. Additional markers for brain
dysfunction include JAM2 (endothelial tight junctions protein), SNAPIN (a mediator of neuronal autophagy-lysosomal function in developing neurons), KCNH2 (potassium channel), S100A14 (involved in cell motility adhesion and growth), KIAA0319 (language impairment biomarker), and IROR1 (a receptor tyrosine kinase like orphan receptor 1, which regulates neurites growth in the central nervous system
having also WNT-signaling pathway functions, and being crucial for the auditive apparatus
maintenance).
Though it is worth noting there is experimental clinical data providing a plausible pathway to suggest long COVID is a result of cell activity dysfunction with plausible biomarkers of dysfunction, and we've known this long enough to know long COVID is a real medical pathology (one distinct from acute infection based on biomarker evidence):
If you build robust privacy guidance mechanisms into the fabric of your startup from the beginning, your ability to handle risk management around these types of cases can be resourced to scale with the customer expectations of the system you build.
Unfortunately, if you do that, you are going to be outcompeted by the teams that are working to get their first 10,000 paying customers by any means necessary, because privacy planning is less capital efficient.
The companies that do get big enough to overcome their immediate survival constraints often have a harder problem identifying and providing resource needs for privacy assurance because it's less on the minds of the people in charge of making resource decisions because you have other operational scaling issues at the front of mind.
Your engineers and support staff doing dumb things with your data is a risk you can have resources allocated to. But it's not on the critical path to market dominance so it shouldn't be expected to be a priority.
I used to dig ditches in places where excavators couldn't go for a living, and I'm familiar with the contract rate differences for that type of labor and equipment.
My point is that the disparity is such a chasm that my brain can't reconcile it. We aren't talking about ditch digging, we are talking about serving food to the people of Seattle. All the software engineers in Seattle, in my experience, love to frequent dining establishments. Their quality of life is dependent on the labor of people serving them. There's no way I can accept the disparity as "just the way it is." My gut can't take it.
Yes, there is an inconsistency in the amount of effort expended to survive versus the outcomes of that effort. I can't reconcile them in my head. I'm watching my friend trying not to physically deteriorate and have some modicum of comfort while I sit here on my couch living off savings from the job I recently quit. Nothing I do can be so much more valuable than what he does.
> Meanwhile, renters are desperate. They’re begging for housing prices not just to slow, but to fall.
I have a friend who is a head chef at a decently popular bar and restaurant on Broadway in Capitol Hill, Seattle (very trendy part of town if you aren't familiar, steep commercial rent). He lives in a 400 sq ft studio and is barely, barely making it from one paycheck to the next. I am sitting on a 2.6% interest rate mortgage and my prices are set for the next 30 years. I probably work half as hard as he does, if not even less than half. I have a lot of cognitive dissonance associated with that.
Customers who care about their data care that it's protected regardless of the size of the business. They care about availability regardless of the size of business.
If customers could make more informed decisions about these risks, i.e. if they could get access to company intellectual property and privileged information about operations, maybe we wouldn't need to consider this type of of legislation. But customers continue to be on the end of information asymmetry about company operations, so now customers need other ways to find protection. Maybe it's the case that there are economies of scale to resilience, and we have to accept some level of difficulty to disrupt because of that.
Regulation generally is targeted at preventing consumer harm. Self-regulation is the practice of appropriately mitigating consumer harm. I mean mobile subscription providers here by "industry."
This person isn't necessarily an oligarch, but they are a major vendor of market research and VC dollars in the space. This is how important they think the stakes are around fake internet money [1]:
> The Biden Administration is trying to strangle crypto.
> A lot of folks have been trying to stifle that criticism, but the effort to destroy the industry is quiet but pervasive across the exec branch.
> The time to make crypto an issue that wins or loses the Presidency is now.
Investors in my company support that view. It's an example of doing things indistinguishable from what oligarchs want: no questions on their authority, even in the wake of massive consumer harms relating to token speculation and fundamentally unsolvable UX issues for retail consumers.
I had to leave mostly because I couldn't deal with the constant cognitive dissonance. The only reliable source of income in crypto is arbing yields on customer deposits to US treasuries, and the whole space is reliant on the government for macroeconomic stability already and they are creating big deposit flow risks and banks are rightfully worried about it. [2]
Got this message in my Discord message requests, from 13 hours ago:
Yo!*Welcome to [redacted]!*
What can we offer you
We providing quality crypto pumps. *We share the name of target coin in advance.*
*We are professional cryptotraders*
And finally, we show you how to beat the market and be ahead of everyone.
**This is your chance to multiply your investment together with the cryptocurrency market whales**!
** The amount of invites is limited! Hurry up to take your place there:** : [redacted]
You can read lots of comments in these threads about the cost/benefit analysis of mitigating the vulnerabilities. And whenever that cost/benefit calculation gets very complex, the default is to not get too worked up about fixing the status quo because "it's complicated."
Also, startups have such an advantage now that there is an ecosystem of COTS and SaaS tooling that can help you do a complete integration strategy. It's arguable MFA regulations would advantage startups because they don't have to deal with the complexity of legacy network piecemeal integration.
I planned and did the roll out of Yubikeys at the last place I worked, before there was a dollar in sales, and the lifecycle could be supported with 2 people (minutes at most out of each day for support) and an integration to our HR platform that automated procurement and mailing of keys.
While normally I would agree wholeheartedly with this, in this very instance I see meaningless abstraction in service of justifying consumer harm. The phishing TTPs outlined in the article can be mitigated with hardware keys, and the places in the corporate network where they must be part of auth workflows can be identified. There are people whose job this is in corporate networks of all levels of piecemeal quagmires. T-Mobile probably has people working on this now.
The TTPs outlined in the article could absolutely be mitigated by use of hardware keys, and this would reduce customer risk. You are right about the liability and support calculation, but that doesn't mean it's OK to shift risk to the customer because it's too expensive. It is a failure to not have implemented a physical key deployment, and it must be treated as a failure.
Lack of knowledge of vulnerability is not the limiting factor in this case. All a "free for all" would do in this case is make more noise in which malicious actors can hide in the logs.
"People" don't need to keep up, the internal controls team needs to keep up, and it's possible to staff such a team with people who know how to mitigate phishing attacks when you are one of the largest corporate targets of phishing by volume on the earth.
Plasma Proteome of Long-covid Patients Indicates Hypoxia-mediated Vasculo-proliferative Disease With Impact on Brain and Heart Function (Preprint)
https://assets.researchsquare.com/files/rs-2448315/v1/8043bd...
An excerpt:
> In Fig. 7A, hierarchical clustering heatmaps reflect the levels of neurological markers across the patient groups (markers have been curated by OLINK). The values of the PEA expression levels were hierarchically clustered based on Pearson correlation algorithms. Markers selected through the above methodology were investigated for functional annotation using tools from the GSEA platform and MSigDB data positories (Fig. 7B). This latest analysis demonstrated that functional clusters were formed around leukocyte migration, positive immune signals, glial cell differentiation, neurogenesis and MAPK regulatory modules. Taken together, these pathways predict a possible brain-blood barrier dysfunctionality grounded on cell proliferation. Graphs in Fig. 7C illustrate the expression levels of individual markers from the functional groups presented in Fig. 7B. One of the highly expressed markers, was the amyloid precursor protein (APP; Supplementary Fig. 10) which is known to be a pathognomonic marker for both Alzheimer disease and brain inflammation [61–65]. Additional markers for brain dysfunction include JAM2 (endothelial tight junctions protein), SNAPIN (a mediator of neuronal autophagy-lysosomal function in developing neurons), KCNH2 (potassium channel), S100A14 (involved in cell motility adhesion and growth), KIAA0319 (language impairment biomarker), and IROR1 (a receptor tyrosine kinase like orphan receptor 1, which regulates neurites growth in the central nervous system having also WNT-signaling pathway functions, and being crucial for the auditive apparatus maintenance).