I don't love it at all. It's over-the-top posturing for posturing's sake. A way to confirm this is to look for HN comments who posture the same. After the Ove

I don't love it at all. It's over-the-top posturing for posturing's sake. A way to confirm this is to look for HN comments who posture the same. After the Overton window widening, they forget to hold back, and will openly say what we know: it's an abuse of the system that turns an outmoded address book into a gossip rag, to the surprise of the actual people involved. Citations: "First I just cared about which accounts got deactivated. Then I started tracking title changes, last name changes (people getting married), department sizes, company head count over time etc." "LDAP's full of secrets. And to think that you can get nearly all of it with anonymous access. Team or department mergers before they were announced? Yep, I've caught those. Secret mailing lists for internal projects? Check who's a member and you can ferret out what's going on. Bonus if the list mail address gives some of it away." "Lots of weird things depend on the LDAP tree being broadly accessible. It's just that it leaks more information than most people think." "Monitor when and what HR is doing. Detect when users are logging in and out of LDAP."