7 ms·

Can't say I'm old, but as anyone else I'm getting older. Yes I've been seeing this behaviour in myself lately. Not something new for me, but now it has a stron

Can't say I'm old, but as anyone else I'm getting older. Yes I've been seeing this behaviour in myself lately. Not something new for me, but now it has a stronger feeling. Could it be due to the general increasing distrust in big companies and nation states? Maybe. It's hard these days for a technical savy person to trust big and loosely regulated organizations.

asim 4y ago
I don't think it's even just distrust of large tech companies but anything that now wants to manage any data or communication. I see startups launching on HN to manage passwords or some new collaboration app and I think, do I really want to put all my information through that? No. I really don't. I don't know who the people are running that service, I don't know their motivations, I don't know what their goals are, I don't know where they're storing that data, how they're securing the service or what they'll do with it in future. I don't even know if they're competent enough to keep any of it secure. If anything I'm more and more convinced people don't have the first clue about security, let alone password security. Does anyone remember what salting passwords means? I'm worried they don't. Will the data be encrypted? Likely not. It just feels like all the stuff that now comes out, it's a rehash of what came before only less secure, less private and more superfluous/likely-to-disappear.
- labarilem 4y ago
  > If anything I'm more and more convinced people don't have the first clue about security, let alone password security. I feel the same, both for fresh sw engineers and non-technical people. And they compose the majority of people writing and using software.
  - asim 4y ago
    I don't know whether it means security ends up being rethought and we actually eliminate passwords entirely, offloading to the magic links in email or SMS codes but it feels like new generations might benefit from just doing that. Still, the data, the communication. I don't want anyone to store it or run it through their servers. So if we found a way to totally offload that it would be interesting. Like maybe entirely new types of software while built for the cloud and uses cloud resources is actually self hosted using your own accounts.

asim 4y ago

I don't think it's even just distrust of large tech companies but anything that now wants to manage any data or communication. I see startups launching on HN to manage passwords or some new collaboration app and I think, do I really want to put all my information through that? No. I really don't. I don't know who the people are running that service, I don't know their motivations, I don't know what their goals are, I don't know where they're storing that data, how they're securing the service or what they'll do with it in future. I don't even know if they're competent enough to keep any of it secure. If anything I'm more and more convinced people don't have the first clue about security, let alone password security. Does anyone remember what salting passwords means? I'm worried they don't. Will the data be encrypted? Likely not. It just feels like all the stuff that now comes out, it's a rehash of what came before only less secure, less private and more superfluous/likely-to-disappear.

labarilem 4y ago
> If anything I'm more and more convinced people don't have the first clue about security, let alone password security. I feel the same, both for fresh sw engineers and non-technical people. And they compose the majority of people writing and using software.
- asim 4y ago
  I don't know whether it means security ends up being rethought and we actually eliminate passwords entirely, offloading to the magic links in email or SMS codes but it feels like new generations might benefit from just doing that. Still, the data, the communication. I don't want anyone to store it or run it through their servers. So if we found a way to totally offload that it would be interesting. Like maybe entirely new types of software while built for the cloud and uses cloud resources is actually self hosted using your own accounts.