4 ms·

Security nihilism isn't the answer. Just because 100% security is a real hard target we shouldn't just all throw our arms in the air, do nothing, and be all sna

Security nihilism isn't the answer. Just because 100% security is a real hard target we shouldn't just all throw our arms in the air, do nothing, and be all snarky about it.

coldpie 3y ago
I never said we should do nothing! What we need to do is acknowledge the fact that networked computers are semi-public, and behave appropriately. Do you really need to put that information into a computer? Do you really need to give that information to someone who will put it into a computer? Do you really need to hook up your computer-based public infrastructure to the network? The cost/benefit evaluation changes when you remember that computer security doesn't exist.
- ta1243 3y ago
  Sadly yes, if I want to be paid then my employer needs my bank account details, it also needs things like name, address, ssn etc for various tax reasons. That information is then given to the lowest bidder to "keep safe". Inevitably it gets mislaid.
  - sneed_chucker 3y ago
    > Sadly yes, if I want to be paid then my employer needs my bank account details I mean under current systems, yes, but it doesn't need to be that way. There is no reason why banks can't offer a system where there's a unique ID for your account that can be used to pay you money but not withdraw that you can give employers or other people who want to pay you. The whole routing/account number thing is just a vestigial holdover from checks.
ta1243 3y ago
We should work to reduce the value of that data. Instead we don't. We just fine the victims. https://www.bbc.co.uk/news/business-55334247 https://www.bbc.co.uk/news/business-55334247
- latency-guy2 3y ago
  Why doesn't the government, who has quite a few times, significantly more than any other party in the world, collectively and individually, pay a fine? I'd love for my money back, but it seems the relationship is only one way. Government makes a mistake? I pay for it. Government needs money? I pay for it. Government wants to spy on me? I pay for it, AND my data gets used against me, AND I also pay that fine. Then somehow, I am the evil one for not supported taxes. Beats me too. Hilarious isn't it?

Security nihilism isn't the answer. Just because 100% security is a real hard target we shouldn't just all throw our arms in the air, do nothing, and be all snarky about it.

coldpie 3y ago

I never said we should do nothing! What we need to do is acknowledge the fact that networked computers are semi-public, and behave appropriately. Do you really need to put that information into a computer? Do you really need to give that information to someone who will put it into a computer? Do you really need to hook up your computer-based public infrastructure to the network? The cost/benefit evaluation changes when you remember that computer security doesn't exist.

ta1243 3y ago
Sadly yes, if I want to be paid then my employer needs my bank account details, it also needs things like name, address, ssn etc for various tax reasons. That information is then given to the lowest bidder to "keep safe". Inevitably it gets mislaid.
- sneed_chucker 3y ago
  > Sadly yes, if I want to be paid then my employer needs my bank account details I mean under current systems, yes, but it doesn't need to be that way. There is no reason why banks can't offer a system where there's a unique ID for your account that can be used to pay you money but not withdraw that you can give employers or other people who want to pay you. The whole routing/account number thing is just a vestigial holdover from checks.

ta1243 3y ago

We should work to reduce the value of that data. Instead we don't. We just fine the victims. https://www.bbc.co.uk/news/business-55334247 https://www.bbc.co.uk/news/business-55334247

latency-guy2 3y ago
Why doesn't the government, who has quite a few times, significantly more than any other party in the world, collectively and individually, pay a fine? I'd love for my money back, but it seems the relationship is only one way. Government makes a mistake? I pay for it. Government needs money? I pay for it. Government wants to spy on me? I pay for it, AND my data gets used against me, AND I also pay that fine. Then somehow, I am the evil one for not supported taxes. Beats me too. Hilarious isn't it?