3 ms·
The author addresses your point 1 directly: you can't provide acceptable privacy guaranteed is your software is not secure. Developer's intent with regards to p
by Rygian 4y ago
The author addresses your point 1 directly: you can't provide acceptable privacy guaranteed is your software is not secure. Developer's intent with regards to privacy is necessary but not sufficient.
- woojoo666 4y agoMy point of #1 is that the author is mainly talking about security but uses the word "privacy". Improving security does not improve privacy, given my definition that privacy assumes good security. I think it's important to disentangle these two concepts because you can have one without the other. We should of course be advocating for both, but each requires their own solutions.
- Rygian 4y agoThe author is criticizing Obsidian for bad security, which in turn results in bad privacy guarantees. The two concepts are tightly dependent and should not be disentangled.
- Rygian 4y agoCase in point: the GDPR is a privacy law that mandates, among many other things, that the systems involved are conceived, built and maintained with proper security considerations. https://gdpr-info.eu/art-32-gdpr/ https://gdpr-info.eu/art-32-gdpr/