#prioritization — Public Fediverse posts

Most of Your Tech Debt Is Free, by (not on Mastodon or Bluesky):

https://piechowski.io/post/most-of-your-tech-debt-is-free/?ref=frontenddogma.com

#technicaldebt #maintenance #prioritization #economics

Most of Your Tech Debt Is Free, by (not on Mastodon or Bluesky):

https://piechowski.io/post/most-of-your-tech-debt-is-free/?ref=frontenddogma.com

#technicaldebt #maintenance #prioritization #economics

AI: Considerations for People Who Make Decisions, by @bert_hubert:

https://berthub.eu/articles/posts/ai-for-decision-makers/?ref=frontenddogma.com

#ai #prioritization #processes

AI: Considerations for People Who Make Decisions, by @bert_hubert:

https://berthub.eu/articles/posts/ai-for-decision-makers/?ref=frontenddogma.com

#ai #prioritization #processes

Software Patching doesn’t mean you’re secure

Ok, as a heading, that is a bit clickbait. But the underlying message is true. Let’s ask ourselves some simple questions. What is a patch? The Cambridge Dictionary says within the context a computers:

small computer program that can be added to an existing program in order to make the existing program work as it should

The key here is change to make something existing to be correct. That means there is something wrong. this can include a means to circumvent security. But to need a fix, we first need to find the fault. As a result that must mean we there is ALWAYS the chance of a fault. Simply put, there is always a vulnerability before a fix. Therefore regardless of how patched we are there is always a possibility however small of their being a vulnerability and that a malicious actor (or hopefully a bug bonus schema or something like Mythos) finds it first.

Cultural challenge

As an industry, our first question when there is a problem is, have you applied the patches (or bug fixes), or have you upgraded to the latest version yet? This is almost as pervasive as the old joke when there is a computer problem: Have you turned it off and on again?

Don’t get me wrong, if you have patches, I’d err towards applying them. But, I’d also advocate trying make a risk assessment as to what patching could go wrong; if you can safely eliminate a problem, it is better to do so. But, blindly patching can be an issue. Patches can conflict other parts of the system, be applied to systems resulting devices being ‘bricked‘ or hitting the ‘blue screen of death‘.

Let me illustrate, using desktop PC. When I receive a windows update, it takes a couple of minutes to see what is there. If the update looks like a malware signatures update – no hesitation, the risk of not taking the change is bigger than bot. If the update is for a driver, then we’re more cautious, which driver, can I install the older one. Time to make sure there is an OS recovery point. If it’s something like a H1 or H2 cumulative and features update – time to run a backup and a restore point.

In an enterprise software environment, be that monolithic on-premises ERPs, through to vast microservice deployments there are the potential for problems. Particularly when you consider the amount of possible customisation that could be involved (in the Oracle domain you’ll hear about CEMLI). This means the possible permutations makes it impossible for the vendor to provide assurances. Not to mention if you’ve applied Modification level changes a patch may well conflict with your modification.

Security in Depth

But security, and the principle of security in depth, is far more than just patching. But I will always advocate more. The ideal world is that we have layers of security, so if one can’t be patched, then other layers are mitigations, or to use another term often used in enterprise security, a ‘compensating controls’ (the idea that if you can’t address a vulnerability in one place, you have security controls elsewhere that can compensate for a weakness).

But we forget – breaches precede patches

The thing we tend to overlook when we get fixated on the idea that staying patched means we’re secure is that a patch always follows a breach. Remember, somewhere along the line, a ‘hacker’ (preferably a security researcher, penetration tester, or a white-hat hacker looking to earn money through bug bounty schemes) will find a vulnerability and breach a system as a result. It is only now that the exploit (vulnerability) is known that the work on creating a patch to address it.

But sometimes a patch isn’t practical (it has massive performance implications and demands a rewrite of a key element of the solution). Therefore, we can address the issue with mitigating controls – this could be at a code level, e.g. adding upfront checks for a specific scenario, through to preventing a piece of software from being used in a particular way.

A vulnerability doesn’t mean you’re vulnerable

This is the difficult perspective, and makes interpreting vulnerability scanner data hard to understand. Often, vulnerability scanners will look across a server and determine what products and components are deployed, and what versions of that functionality are deployed. Then look up those components for the list of attributed vulnerabilities. This is helpful, you know, you need to give this some due consideration. But we should not forget that software (and particularly enterprise software) has many configuration points that can cause it to follow different paths, and the vulnerability may lie only in one path. The latest version of WebLogic server has 650-700 mBeans (one of the techniques to configure the WLS behavior).

Look at it another way, you’re a single person with a car (which usually has 4 seats). You need the car to commute to and from work, and to do common chores like going shopping. But one of the back seats ended up getting ripped. The garage wants thousands to replace it. This does not stop you from using the car to commute to work and to do other necessary tasks. Yo have probably unconsciously applied a ‘compensating control’ – never take more than 2 other people in the car with you, and prevent a back seat passenger from sitting on the ripped seat. Frustrating – maybe, but not inoperable. Of course, applying that compensating control to use the car as a taxi would not be commercially viable. You, as the car owner, need to do some due diligence, such as ensuring the rip isn’t a symptom of a more fundamental risk? Yes. Do you need to consider the likelihood of needing more than 2 passengers? Yes.

Patch velocity

One of the challenges that are developing is the velocity of patches coming as AI is able to be used to locate potential errors that then get addressed. This creates an issue of the organization’s being able to rollout patches. This may not sound too challenging, until consider

• not all organizations have a pure Kubernetes ecosystem with the means to orchestrate node replacement quickly and easily.
• Capacity demands (people, and or compute resources) needed for performing verification steps for any change can out strip resources, or impact other change effort – such as legal compliance, or changes to keep you in business (although a breach could be just as catastrophic).
• Demand impacts, when organizations are also trying to create bandwidth and/or budget to transition off vulnerable systems can end up being blocked.
• Patch volumes for an environment that is already considered ‘fragile’ are going to generate a lot of work, as not only does the patch need to be applied, but a lot of effort will be needed to demonstrate the the wider business the possible impact has been validated.

To combat velocity, is to work on ccompensating controls in other areas of your system. If the application has a networking weakness, consider not patching the software, and ensuring networking configurations block the network port(s) that are associated with the vulnerability. Add monitoring, and checks to ensure the change to the network aren’t accidentally undone. If you do later apply the patch to address the weakness, don’t unpick the network mitigations, as this gives you ‘security in depth’.

Scanning tools

We can also use detection or scanning tooling to help. For solutions that you have development control over, and preproduction environments should be using these tools. But we have to be careful how we interpret the outcomes of these tools. Blindly take their reports can send us chasing issues, that aren’t really issues. While measuring detecting and measuring risk management is a positive thing, it needs to be done in an informed way.

For example, you run the scanning tool with admin level privileges so it can inspect everything. But, then it detects the finger print of an old version of Java with vulnerabilities in the Swing UI library. But the only reason Java is present is to run some CLI admin utilities. It is never used by the core application, there are no deployed Swing solutions in the environment. If we don’t give consideration to the context of the problem, we end up patching an issue that is in all probability going to be a problem.

At the same time, we can use this understanding to prioritise patching. Yes, applying a patch if available is good, but if applying a patch that breaks your tool is not. Spending time patching a vulnerability, when you don’t use the vulnerable code is eating into capacity to actually implement business change which may well eliminate the problem anyway (for example standardising scripting tools on Python).

What does this all mean?

Bottom line is, if you can patch, you have the ability and capacity to do so then it’s better to do so, as it keeps another layer of defence in place. But you don’t have access to patches (out of support etc), capacity to solve everything immediately then intelligent assessment of the vulnerability, risk driven prioritisation, look to mitigation strategies.

Defence in depth is not a security seller’s motto, but a genuine way to ensure that if one point fails, the next should protect you. But if you can’t patch, understand what the vulnerability is, and ensure you have mitigations in place. Ensure the issue and its implications in your context are documented along with the mitigations – so you have auditable content for any audit. You have been told where the minefield is, so you’ve fenced the area off, so people don’t wander into the issue unwittingly.

Useful Resources

• NIST compensating security control
• Patch velocity
• NCSC Vulnerability management
• Risk Based Vulnerability Management

📝💼 "Compromise isn't evil, it's just design's annoying sibling that nobody invited to the party." 🎉 #Design is all about deciding which feature to throw under the bus first! 🤷‍♂️ Prioritizing? Nah, just the art of picking which dream to crush today! Dreams are overrated anyway, right? 😉
https://stephango.com/design-is-compromise #compromise #prioritization #userexperience #creativity #humor #HackerNews #ngated

📝💼 "Compromise isn't evil, it's just design's annoying sibling that nobody invited to the party." 🎉 #Design is all about deciding which feature to throw under the bus first! 🤷‍♂️ Prioritizing? Nah, just the art of picking which dream to crush today! Dreams are overrated anyway, right? 😉
https://stephango.com/design-is-compromise #compromise #prioritization #userexperience #creativity #humor #HackerNews #ngated

✮ Warning Lights I Ignore ✮

Subscribe to keep reading

Become a paid subscriber to get access to the rest of this post and other exclusive content.

✮  Get It Started ✮ 

Subscribe to keep reading

Become a paid subscriber to get access to the rest of this post and other exclusive content.

🧐:

“Doing Nothing At Work”, Sean Goedecke (https://www.seangoedecke.com/doing-nothing-at-work/).

On HN: https://news.ycombinator.com/item?id=48442880

#Work #Procrastination #Productivity #Career #Bandwidth #Busyness #Busybody #Prioritization

🧐:

“Doing Nothing At Work”, Sean Goedecke (https://www.seangoedecke.com/doing-nothing-at-work/).

On HN: https://news.ycombinator.com/item?id=48442880

#Work #Procrastination #Productivity #Career #Bandwidth #Busyness #Busybody #Prioritization

#COMTGene #MentalHealth #GeneMutation #Methylation #GeneticTesting #BrainHealth #StressManagement #Prioritization #wellbeingatwork #wellbeingtips #wellnessurlaub #Neurocience #MentalWellbeing https://mastodon.social/@biohackingpathway/116736123713280362

The Snooze Tabs browser add-on is a key technology I use for category 2, defending focus (and prioritizing) from my previous post (link in footer).

I noted in the #indieweb informal cafe chat that "I am going to snooze the tab for a month and re-evaluate then" (about purchasing a potentially focus-enhancing electronic device), and was asked how do I snooze a tab for a month.

https://addons.mozilla.org/en-US/firefox/addon/snoozetabs/

I noted the Snooze Tabs browser extension does this, i.e. one-click to snooze a tab for
* later today
* tomorrow morning
* the weekend
* a week from now
* a month from now
* or a custom date and time

I have used it for years and as someone who opens LOTS of tabs, it has been essential for quickly closing tabs (for now) that are not my current (now, today, this week) priority.

A few regular use-cases which are all one-click from my Firefox toolbar:
* snooze work-related tabs until the next day, when I'm wrapping up work for the day
* snooze personal projects tabs until the weekend
* snooze lower priority work-task related tabs for a week
* snooze product tabs for a month when I want to wait (procrastinate) to see if I still want/need an item that seemed interesting in the moment

One key use-case I have which I have to set manually:
* snooze work-related tabs to Monday when it’s the weekend

There is an issue to swap the "next weekend" menu item to "next weekday" when it’s the weekend which would be a nice improvement:
* https://github.com/bwinton/SnoozeTabs/issues/393

This add-on is a good example of open source that “just works” even if its source code repository has not seen recent activity.

It’s also a good example of “good enough” rather than perfect.

If I get around to it, I may explore what it would take to help resolve issues, commit code, and do another release, at least to make progress on that one issue.

For now however, I am snoozing that GitHub tab for a month.

Previously:
* https://tantek.com/2026/158/t2/three-insights-improving-focus

#focus #priorities #prioritization #Firefox #snooze #SnoozeTabs #browserAddOn #browserExtension

The Snooze Tabs browser add-on is a key technique I use for category 2, defending focus (and prioritizing) from my previous post (link in footer).

I noted in the #indieweb informal cafe chat that "I am going to snooze the tab for a month and re-evaluate then" (about purchasing a potentially focus-enhancing electronic device), and was asked how do I snooze a tab for a month.

https://addons.mozilla.org/en-US/firefox/addon/snoozetabs/

I noted the Snooze Tabs browser extension does this, i.e. one-click to snooze a tab for
* later today
* tomorrow morning
* the weekend
* a week from now
* a month from now
* or a custom date and time

I have used it for years and as someone who opens LOTS of tabs, it has been essential for quickly closing tabs (for now) that are not my current (now, today, this week) priority.

A few regular use-cases which are all one-click from my Firefox toolbar:
* snooze work-related tabs until the next day, when I'm wrapping up work for the day
* snooze personal projects tabs until the weekend
* snooze lower priority work-task related tabs for a week
* snooze product tabs for a month when I want to wait (procrastinate) to see if I still want/need an item that seemed interesting in the moment

One key use-case I have which I have to set manually:
* snooze work-related tabs to Monday when it’s the weekend

There is an issue to swap the "next weekend" menu item to "next weekday" when it’s the weekend which would be a nice improvement:
* https://github.com/bwinton/SnoozeTabs/issues/393

This add-on is a good example of open source that “just works” even if its source code repository has not seen recent activity.

It’s also a good example of “good enough” rather than perfect.

If I get around to it, I may explore what it would take to help resolve issues, commit code, and do another release, at least to make progress on that one issue.

For now however, I am snoozing that GitHub tab for a month.

Previously:
* https://tantek.com/2026/158/t2/three-insights-improving-focus

#focus #priorities #prioritization #Firefox #snooze #SnoozeTabs #browserAddOn #browserExtension

How to Prioritize ADA Title II Accessibility Efforts, by @sloandr.bsky.social:

https://vispero.com/resources/ada-title-ii-accessibility-prioritization-guide/

#howtos #accessibility #ada #legal #prioritization

How to Prioritize ADA Title II Accessibility Efforts, by @sloandr.bsky.social:

https://vispero.com/resources/ada-title-ii-accessibility-prioritization-guide/

#howtos #accessibility #ada #legal #prioritization

A quotation from Tolstoy

Memento mori — remember death! These are important words. If we kept in mind that we will soon inevitably die, our lives would be completely different. If a person knows that he will die in a half hour, he certainly will not bother doing trivial, stupid, or, especially, bad things during this half hour. Perhaps you have half a century before you die — what makes this any different from a half hour?

Leo Tolstoy (1828-1910) Russian novelist and moral philosopher
Path of Life [Calendar of Wisdom; Круг чтения], ch. 21 “Living in the Present,” sec. 5.12 (1903-1911) [(tr. Cote (2002)]

More about this quote: wist.info/tolstoy-leo/83806/

#quote #quotes #quotation #qotd #tolstoy #leotolstoy #pathoflife #brevity #death #goodliving #lifespan #living #mementomori #mortality #prioritization #timelimit

AI КОМП-АС — разбор фреймворка. П: Прокладываем путь

У вашей организации есть список AI инициатив, с помощью которых вы хотите трансформировать существующие бизнес-процессы, чтобы достичь стратегических целей. Но как подступиться к их имплементации? С чего следует начать? Что делать, а что нет? You can do anything but you can’t do everything - можно реализовать что-угодно, но нельзя получить все везде и сразу. В сегодняшней статье мы рассмотрим подход к оценке потенциала и приоритезации списка инициатив с помощью AI Tech Gartner’s Sandwich , после чего построим реалистичную дорожную карту AI трансформации организации, исходя из достижимости и ожидаемых эффектов выбранных инициатив . Полное описание фреймворка можно найти здесь .

https://habr.com/ru/companies/raft/articles/1024432/

#ai #roadmap #product_management #gartner_ai_tech_sandwich #business_value #prioritization #phased_approach

Task Compass 1.0.3 is out! Main changes: removed the Pomodoro timer and calendar integration. Many UI improvements, adding buttons and menus for common interactions.

https://task-compass.app/news/version-1.0.3/

#productivity #prioritization #taskmanagement

I got the minimal version of #TaskCompass running on #Android!
#productivity #prioritization

I'm only now discovering that people were asking about the exact app that I was implementing! For example this one:
https://www.reddit.com/r/ProductivityApps/comments/1mcd2q9/does_an_app_exist_where_you_can_prioritize_your/
…unfortunately the post is from 7 months ago and it’s now archived.
#prioritization #productivity

Accessibility Progress and Healthy Engineering Teams, by @hbuchel:

https://heather-buchel.com/blog/2026/02/accessibility-is-an-engineering-health-indicator/

#accessibility #technicaldebt #webplatform #prioritization

Accessibility Progress and Healthy Engineering Teams, by @hbuchel:

https://heather-buchel.com/blog/2026/02/accessibility-is-an-engineering-health-indicator/

#accessibility #technicaldebt #webplatform #prioritization

We are not good at assigning an absolute score to individual list items. We’re slightly better at stack-ranking. We excel at comparing things.

#productivity #prioritization

JS-Heavy Approaches Are Not Compatible With Long-Term Performance Goals, by @sergiomdgomes:

https://sgom.es/posts/2026-02-13-js-heavy-approaches-are-not-compatible-with-long-term-performance-goals/

#javascript #frameworks #performance #prioritization

JS-Heavy Approaches Are Not Compatible With Long-Term Performance Goals, by @sergiomdgomes:

https://sgom.es/posts/2026-02-13-js-heavy-approaches-are-not-compatible-with-long-term-performance-goals/

#javascript #frameworks #performance #prioritization

#COMTGene #MentalHealth #GeneMutation #Methylation #GeneticTesting #BrainHealth #StressManagement #Prioritization #wellbeingatwork #wellbeingtips #wellnessurlaub #Neurocience #MentalWellbeing https://mastodon.social/@biohackingpathway/116033774224527985

Of course, it’s important to prioritise things, just like having a good strategy, while keeping in mind the advantages and other factors 👌

#efficiency #prioritization #timemanagement #productivity

Lists are the main form of presentation in #productivity: we even say "a TODO list". But what if the list is not the best UI? Here's why: https://task-compass.app/concepts/list-as-presentation/

#prioritization

Accessibility as a Core Requirement, by @mharshbarger.bsky.social:

https://michaelharshbarger.com/insights/accessibility-core-requirement.html

#accessibility #prioritization

Accessibility as a Core Requirement, by @mharshbarger.bsky.social:

https://michaelharshbarger.com/insights/accessibility-core-requirement.html

#accessibility #prioritization

This Redditor seems to be asking about #overwhelm in #productivity and #prioritization.
This might be a problem similar to the one I had.
https://www.reddit.com/r/ProductivityApps/comments/1plcqu6/comment/nu5144i/

What Sam Altman Just Taught Us About OKRs (Without Meaning To), by @cwodtke:

https://eleganthack.com/what-sam-altman-just-taught-us-about-okrs-without-meaning-to/

#okr #prioritization #processes #openai

What Sam Altman Just Taught Us About OKRs (Without Meaning To), by @cwodtke:

https://eleganthack.com/what-sam-altman-just-taught-us-about-okrs-without-meaning-to/

#okr #prioritization #processes #openai

“Technical Debt Will Bite Us in the Ass”: How to Make Non-Technical Stakeholders Actually Care, by (not on Mastodon or Bluesky):

https://dev.to/tlorent/technical-debt-will-bite-us-in-the-ass-how-to-make-non-technical-stakeholders-actually-care-2oef

#howtos #technicaldebt #communication #prioritization

“Technical Debt Will Bite Us in the Ass”: How to Make Non-Technical Stakeholders Actually Care, by (not on Mastodon or Bluesky):

https://dev.to/tlorent/technical-debt-will-bite-us-in-the-ass-how-to-make-non-technical-stakeholders-actually-care-2oef

#howtos #technicaldebt #communication #prioritization

You’re Not Building Netflix: Stop Coding Like You Are, by (not on Mastodon or Bluesky):

https://dev.to/adamthedeveloper/youre-not-building-netflix-stop-coding-like-you-are-1707

#programming #architecture #prioritization

You’re Not Building Netflix: Stop Coding Like You Are, by (not on Mastodon or Bluesky):

https://dev.to/adamthedeveloper/youre-not-building-netflix-stop-coding-like-you-are-1707

#programming #architecture #prioritization

“Good Engineering Management” Is a Fad, by @lethain:

https://lethain.com/good-eng-mgmt-is-a-fad/

#engineeringmanagement #prioritization

Becoming Unblockable, by @seangoedecke.bsky.social:

https://www.seangoedecke.com/unblockable/

#career #prioritization #tooling #collaboration

“Good Engineering Management” Is a Fad, by @lethain:

https://lethain.com/good-eng-mgmt-is-a-fad/

#engineeringmanagement #prioritization

Becoming Unblockable, by @seangoedecke.bsky.social:

https://www.seangoedecke.com/unblockable/

#career #prioritization #tooling #collaboration

The Fundamentals Problem, by @chrbutler:

https://www.chrbutler.com/the-fundamentals-problem

#fundamentals #design #prioritization

The Fundamentals Problem, by @chrbutler:

https://www.chrbutler.com/the-fundamentals-problem

#fundamentals #design #prioritization

A quotation from Cicero

It is impossible, either in action or in thought, to attend to two things at once, especially if they are of any importance.
 
[Duas tamen res, magnas praesertim, non modo agere uno tempore, sed ne cogitando quidem explicare quisquam potest.]

Marcus Tullius Cicero (106-43 BC) Roman orator, statesman, philosopher
Philippics [Philippicae; Antonian Orations], No. 11, ch. 9 / sec. 23 (11.9/11.23) (43-02 BC) [ed. Harbottle (1906)]

More info about (and translations of) this quote: wist.info/cicero-marcus-tulliu…

#quote #quotes #quotation #qotd #cicero #philippic #attention #focus #juggling #multitasking #prioritization #splitattention

♻️ Project Spotlight: ZeroPM

The goal of the pathfinding Horizon Europe #ZeroPM project is to protect our water from contamination with #persistent #mobile substances. An evidence-based multilevel framework including #prevention, #prioritization and #removal approaches is used to lead chemical strategy.

🏛️ Uni Vienna Team: Sabine Pahl, Mathew White & Ellise Suffill, with support from Louisa Richter and Hélène Zillig.

⌛ Duration: 2021–2026

🌐 For more information visit: https://zeropm.eu/

Some good 👌🏽 advice 👇🏽 here:

“How I Influence Tech Company Politics As A Staff Software Engineer”, Sean Goedecke (https://www.seangoedecke.com/how-to-influence-politics/).

Via HN: https://news.ycombinator.com/item?id=45473852

#Influence #Work #Career #StaffEngineer #Prioritization #Reprioritization #InfluenceWithoutAuthority

Your Next Design Might Be Your Last, by @uxdesigncc:

https://archive.fo/IbMT4

#design #prioritization

Do the Simplest Thing That Could Possibly Work, by (not on Mastodon or Bluesky):

https://www.seangoedecke.com/the-simplest-thing-that-could-possibly-work/

#simplicity #softwaredesign #prioritization

Join us as we delve into Bible readings and explore the crucial topic of prioritization. We examine how putting God first impacts our lives, and the challenges we face. Learn how to navigate life's ups and downs with faith and understanding. #BibleReadings #Prioritization #Faith #GodFirst #Christianity #SpiritualGrowth #Inspirational #Church #OldTestament #FirstKings

Less theory, more traction. Making Things Happen is full of hard-won lessons on leading cross-functional teams through the messy middle of execution. #DesignManagement #ProjectManagement #DesignStrategy #Prioritization

https://www.designative.info/2025/07/15/book-review-making-things-happen-by-scott-berkun/

Will the Model Eat Your Stack?, by @dbreunig:

https://www.dbreunig.com/2025/05/27/will-the-model-eat-your-stack.html

#ai #productmanagement #prioritization