5 ms·

The negative consequences of incomplete privacy are certainly real, they’re just not nearly as numerous as you seem to believe. I can and I will dismiss the ki

by Zetice 3y ago

The negative consequences of incomplete privacy are certainly real, they’re just not nearly as numerous as you seem to believe. I can and I will dismiss the kinds of privacy concerns that rely on me being unable to understand how risk works, that rely on me falsely believing a solution to any problem exists with zero downside, that rejects any decision that has even one casualty. I tried to show you how futile a game of, “your idea hurts people” is, but you seem incapable of moving past it. What a shame.

danShumway 3y ago
Holy crud, HN has been weird lately :) So I learned today that suggesting Facebook should encrypt its messenger app is actually just me embracing a fantasy about the nature of safety and risk. I don't know I feel like you're probably 3 messages away from telling me that I should remove my smoke alarms from my house because house fires are uncommon and then calling me deluded because I wear a helmet when I go biking. I didn't realize that me taking 30 seconds to install Signal and then using it to chat with my friends was a futile rebellion against the natural order ;) Okay apologies, I really don't mean to be snarky. But you've taken this conversation in a very strange direction that I don't think is representative of what anyone who rejects the "I have nothing hide" narrative actually believes. I would just point out once again, I am less pseudonymous than you are right now. I'm using my real name, I have more contact information listed on my profile. Very obviously I am willing to publish information about myself. So the context of this conversation really just does not align with this view you've gotten that the people disagreeing with you are just privacy absolutists who think any privacy risk at all is too large to take. If you're saying that someone is rejecting all risk and refusing to accept a privacy system with any downside, and at the same time you notice that they're actively and deliberately publishing their real name and email address, then that should give you pause and it should make you step back and think, "maybe I don't understand what their argument is." Maybe when that person points out that risks exist they're saying something more than "any risk is too much risk".
- Zetice 3y ago
  You compared using Whatsapp to wearing a seatbelt; the problem with this analogy is that many, MANY more people die in car accidents than from... whatever abstract value me using Whatsapp will provide you, a complete stranger. You're failing to understand that the conversation does not end just because someone is harmed by something. You, and society generally, do not consider "one single negative outcome" to be enough of a reason to not do anything. We can't get past this. You must either accept this as an observation about reality, or you will not understand whatever other direction this conversation may go.
  - danShumway 3y ago
    > You, and society generally, do not consider "one single negative outcome" to be enough of a reason to not do anything. Like I said, this is a completely incorrect reading of my position, and it should be obvious to you that it's incorrect because I'm taking privacy risks right now. If I believed that "a single negative outcome" was enough privacy risk to justify not doing something, I wouldn't be talking to you right now, I'd be living in the woods and shooting drones out of the sky. But I'm not, so very clearly you are missing something about my views. > whatever abstract value me using Whatsapp will provide you, a complete stranger. Collective usage of E2EE makes it easier for other people to blend into the crowd and makes usage of E2EE messaging less suspicious. This is not exactly hard to understand and it's not abstract. It's the same reason why many cisgender people list pronouns when filling out profiles on new services -- it's a very low-cost way to make it so that transgender users aren't singling themselves out. Collective normalization of E2EE also encourages people who aren't technically inclined and who are just following network effects to switch over to better messengers, which makes them safer without forcing them to become privacy experts. And of course, when we talk about the "nothing to hide" fallacy, we mean more than "your actions as a stranger benefit me" -- we're pointing out that the risk analysis most people do about privacy risks is flawed and over-optimistic and advising you that you might want to redo that risk analysis. For comparison, you wearing a helmet when you ride your bicycle won't keep me safe, but the safety benefits to you outweigh the downsides and you should still probably wear one anyway. Because people feel invincible about accidents even though they're very much not.

by Zetice 3y ago

danShumway 3y ago

Holy crud, HN has been weird lately :) So I learned today that suggesting Facebook should encrypt its messenger app is actually just me embracing a fantasy about the nature of safety and risk. I don't know I feel like you're probably 3 messages away from telling me that I should remove my smoke alarms from my house because house fires are uncommon and then calling me deluded because I wear a helmet when I go biking. I didn't realize that me taking 30 seconds to install Signal and then using it to chat with my friends was a futile rebellion against the natural order ;) Okay apologies, I really don't mean to be snarky. But you've taken this conversation in a very strange direction that I don't think is representative of what anyone who rejects the "I have nothing hide" narrative actually believes. I would just point out once again, I am less pseudonymous than you are right now. I'm using my real name, I have more contact information listed on my profile. Very obviously I am willing to publish information about myself. So the context of this conversation really just does not align with this view you've gotten that the people disagreeing with you are just privacy absolutists who think any privacy risk at all is too large to take. If you're saying that someone is rejecting all risk and refusing to accept a privacy system with any downside, and at the same time you notice that they're actively and deliberately publishing their real name and email address, then that should give you pause and it should make you step back and think, "maybe I don't understand what their argument is." Maybe when that person points out that risks exist they're saying something more than "any risk is too much risk".

Zetice 3y ago
You compared using Whatsapp to wearing a seatbelt; the problem with this analogy is that many, MANY more people die in car accidents than from... whatever abstract value me using Whatsapp will provide you, a complete stranger. You're failing to understand that the conversation does not end just because someone is harmed by something. You, and society generally, do not consider "one single negative outcome" to be enough of a reason to not do anything. We can't get past this. You must either accept this as an observation about reality, or you will not understand whatever other direction this conversation may go.
- danShumway 3y ago
  > You, and society generally, do not consider "one single negative outcome" to be enough of a reason to not do anything. Like I said, this is a completely incorrect reading of my position, and it should be obvious to you that it's incorrect because I'm taking privacy risks right now. If I believed that "a single negative outcome" was enough privacy risk to justify not doing something, I wouldn't be talking to you right now, I'd be living in the woods and shooting drones out of the sky. But I'm not, so very clearly you are missing something about my views. > whatever abstract value me using Whatsapp will provide you, a complete stranger. Collective usage of E2EE makes it easier for other people to blend into the crowd and makes usage of E2EE messaging less suspicious. This is not exactly hard to understand and it's not abstract. It's the same reason why many cisgender people list pronouns when filling out profiles on new services -- it's a very low-cost way to make it so that transgender users aren't singling themselves out. Collective normalization of E2EE also encourages people who aren't technically inclined and who are just following network effects to switch over to better messengers, which makes them safer without forcing them to become privacy experts. And of course, when we talk about the "nothing to hide" fallacy, we mean more than "your actions as a stranger benefit me" -- we're pointing out that the risk analysis most people do about privacy risks is flawed and over-optimistic and advising you that you might want to redo that risk analysis. For comparison, you wearing a helmet when you ride your bicycle won't keep me safe, but the safety benefits to you outweigh the downsides and you should still probably wear one anyway. Because people feel invincible about accidents even though they're very much not.