3 ms·

> Security is ALWAYS (fucking always, yes really - fucking always) a tradeoff. It’s helpful to me that ACLs prevent me seeing other users’ files. I’m not tradi

• horsawlarway 3y ago
  > I’m not trading anything off that I’m aware of. Really? Really???? You're not, say... having to manage ACLs, and having to run a system that can enforce ACLs? Because both of those are tradeoffs. They might be "completely sane and reasonable" tradeoffs! But they are still tradeoffs. Also - in a more blunt way: Simply not being able to see other peoples files was considered a pretty big negative in some computing crowds when it was first enforced. That's a huge tradeoff: You're sacrificing visibility for privacy. I think that turned out to be the correct tradeoff in most places - but to be clear - you absolutely are losing a feature to gain a feature.
  • pxc 3y ago
    > Really? Really???? You're not, say... having to manage ACLs, and having to run a system that can enforce ACLs? In this case, it's a more user-friendly tradeoff, because those burdens can be borne by the infosec staff and other IT staff rather than end users. I'm happy when I can arrange things that way for my own users for sure.