3 ms·

Would a screenshot really prove anything, though? It would be trivial to modify

tlb 4y ago
If it comes down to an I-said/they-said about whether I checked some box, then: - if it's my memory against their database, I'd probably lose. - if it's my video capture against their database, it could go either way. - if it's me and several others' videos against their database, we'd likely win. But besides the win-lose proposition, it'd be worth something to me to be confident whether I was right or not.
- mynameisvlad 4y ago
  But who are you trying to convince? If it's them, they can just say "ok so what" to your footage, it existing or not or coming from multiple people or not is not entirely relevant, as a company they can choose to use it or throw it away. If it's everyone else, why? What benefit does it get you to have others know you're right? You're still in the same position, with your choice discarded.
  - tlb 4y ago
    It could be a journalist writing a story about how some company sells your information despite users checking "[x] don't sell my information". It could be a government consumer protection agency investigating the company, or a court asked to fine the company.
KingOfCoders 4y ago
When working a large enterprise, legal asked technology if we could create and store a screenshot of every email going out for evidence in court.
- dsr_ 4y ago
  Did you explain cryptographic signing to them?
  - KingOfCoders 4y ago
    How would you show the content and layout of an email with cryptographic signing? You could sign the screenshot with a timestamp (out of my league though to get that right) from an untamperable source to show it hasn't been tampered with. Did you mean that?
    - dsr_ 4y ago
      Every day, generate an archive of all the email you received. Encrypt it, sign it, and generate a hash. Put all the hashes on a public page. Write the procedure up, and have a VP attest that they ordered this done and have audited a random sample to ensure that it was done to spec. Get the attestation notarized. Repeat once a quarter or so. If the VP moves on or dies, make sure the new VP is on board immediately. No need to have a screenshot, it's email. When a court requires you to show evidence, you bring in the VP, the notarized statement, a copy of the code, and the encrypted and unencrypted archive for that day.
      - KingOfCoders 4y ago
        I don't know if saving the email with all inline images and downloading all external images, having the mail clients to render this as it was at the time, packaging this up, etc. is easier than taking a screenshot (like E.g. Litmus does) E.g. for offers in an image.

tlb 4y ago

If it comes down to an I-said/they-said about whether I checked some box, then: - if it's my memory against their database, I'd probably lose. - if it's my video capture against their database, it could go either way. - if it's me and several others' videos against their database, we'd likely win. But besides the win-lose proposition, it'd be worth something to me to be confident whether I was right or not.

mynameisvlad 4y ago
But who are you trying to convince? If it's them, they can just say "ok so what" to your footage, it existing or not or coming from multiple people or not is not entirely relevant, as a company they can choose to use it or throw it away. If it's everyone else, why? What benefit does it get you to have others know you're right? You're still in the same position, with your choice discarded.
- tlb 4y ago
  It could be a journalist writing a story about how some company sells your information despite users checking "[x] don't sell my information". It could be a government consumer protection agency investigating the company, or a court asked to fine the company.

KingOfCoders 4y ago

When working a large enterprise, legal asked technology if we could create and store a screenshot of every email going out for evidence in court.

dsr_ 4y ago
Did you explain cryptographic signing to them?
- KingOfCoders 4y ago
  How would you show the content and layout of an email with cryptographic signing? You could sign the screenshot with a timestamp (out of my league though to get that right) from an untamperable source to show it hasn't been tampered with. Did you mean that?
  - dsr_ 4y ago
    Every day, generate an archive of all the email you received. Encrypt it, sign it, and generate a hash. Put all the hashes on a public page. Write the procedure up, and have a VP attest that they ordered this done and have audited a random sample to ensure that it was done to spec. Get the attestation notarized. Repeat once a quarter or so. If the VP moves on or dies, make sure the new VP is on board immediately. No need to have a screenshot, it's email. When a court requires you to show evidence, you bring in the VP, the notarized statement, a copy of the code, and the encrypted and unencrypted archive for that day.
    - KingOfCoders 4y ago
      I don't know if saving the email with all inline images and downloading all external images, having the mail clients to render this as it was at the time, packaging this up, etc. is easier than taking a screenshot (like E.g. Litmus does) E.g. for offers in an image.