4 ms·

To be fair, "it's just a fucking hobby" no longer being an excuse has been a long time coming, much in the same way that driving cars or flying airplanes starte

To be fair, "it's just a fucking hobby" no longer being an excuse has been a long time coming, much in the same way that driving cars or flying airplanes started as just a hobby but became no longer one when practicing it had outsized consequences to non-practitioners. Signed, someone who notes frequently that the default apache configs probably put a web developer in violation of the GDPR (since if you just left on collecting IP addresses for no reason, you are de-facto not collecting them for "network security.")

iamnothere 7mo ago
You’re arguing against freedom of computing, itself an extension of freedom of thought and freedom of speech. These laws are an attempt to regulate not just what you do with your computer, but how it operates. This is fundamentally an attack on rights and freedoms, and if it goes unchallenged then it will expand into other areas. Maybe that doesn’t move you; it seems like you don’t care much for personal liberties. (A Euro, go figure.) But this is America and we have constitutional guarantees here.
- Apocryphon 7mo ago
  Freedom doesn’t flow one way though. Their GDPR example just gives freedom to non-state malefactors to impinge upon user freedoms. You’re crying about 1984 and they’re crying about Neuromancer. An age-old dilemma. https://theonion.com/the-future-will-be-a-totalitarian-government-dystopia-v-1819594281/ https://theonion.com/the-future-will-be-a-totalitarian-gover...
- shadowgovt 7mo ago
  You have made some fascinating assumptions about the person you are addressing. I recommend refraining from that in the future and instead asking why a fellow American takes a position other than the one you hold. Two guys built a website to try and help people curb their undesired sexual proclivities and because they were bad at security, their users' personal information (including their own logs of their sexual proclivities) is leaked. They will see no consequences other than "oops, oh well, I guess we're going to shut down our website now and, probably, build another one." Why is that okay? We've de-facto operated as if it os okay for decades under a notion of "user beware," but that notion is increasingly incompatible with the goals of treating Internet access as a human right because if you let everyone on, you are definitely letting people on who lack the capacity, knowledge, or savvy to beware. And we lack a framework for holding "two guys who just told the world how often you jack off" accountable for their violation of confidentiality. Individual users become nodes in botnets. Individual users have their identities compromised. Individual users are talked into being kidnapped by anonymous victimizers. Individual users are, increasingly, everyone's concern the moment they connect to a shared network. And, perhaps most significantly to this topic: the Internet does not distinguish between two guys building a hobby app and a professional service. This specific notion, age-gating access, may not be the right step. But we should be a lot more serious about taking more than zero steps. The time of effing around and pretending there are no consequences to these technologies is over.
  - iamnothere 7mo ago
    If you’re an American and you want to change this, feel free to propose and pass an amendment. That’s the allowable process for changing what the government can and can’t do regarding individual rights. Edit: removed part of my comment because misunderstood your rambling point about that website, and I guess I have no idea how it relates to OS regulation. Websites are not operating systems. Your ability to tell me how I run my systems stops at my door, especially if I’m not hosting commercial services. Again, that’s just a question of fundamental rights.
    - shadowgovt 7mo ago
      Conversely, you're an American and you want to change this, feel free to propose and pass an amendment that makes regulation of OS as a product the concern of the federal government, as opposed to (as per the 10th Amendment) a state government concern. These regulations are state affairs for the same reason that glyphosate is known in the state of California as a carcinogen (but not other states). Product standards are, generally, a state-level concern. I agree this is inefficient, but the burden to modify the Constitution is on those who would change that inefficiency. I appreciate the grace in taking a step back on my other comment; I phrased it poorly. Here's my point in better summary: I think we have an issue right now where our hobby has two things that are true that have significant negative societal outcomes. And to be clear, I'm primarily responding to this comment: "Who is providing them with legal indemnification since they are now apparently subject to fines for a fucking hobby if they do it wrong?" Because the answer to that is "If these things are true, it doesn't matter." 1. There is very little daylight between professional and hobby coding. That has been one of its virtues: a person with the right idea can garage-hack way into becoming Fark, or Slashdot, or Craigslist. But the flipside of that coin is that a kid messing around in their garage can cause real consequences for real people they will never even meet. How many websites are falling over from people experimenting with AI crawling right now (at disregard for the existing best-practices for crawling)? 2. A lone actor misusing the machine can have large-impact consequences on strangers. A kid in their basement doing script-kiddie garbage can exfiltrate confidential data, steal someone's electricity to mine Bitcoin, or even just wreck their machine remotely, for fun. A lone actor with no malicious intent but simple negligence can drop a machine on the Internet with all the ports open and become a botnet node. When we have sitautions like that in the past, we often use licensure to ensure some minimum standard of care when using the shared resource. In fairness, what may want to be licensed here is using the Internet, not installing an operating system. I think that's a fair point and state governments trying to move the issue to the OS, not network-connectivity level, are making a mistake.
- bee_rider 7mo ago
  This site is hosted in America, but in general I think they get the Internet in other countries now.
GuestFAUniverse 7mo ago
Simple: the fail2ban jails need the logs to keep the bots away, that prevent a proper operation. Thus it is technically necessary. And this is explicitly allowed as part of the GDPR. On the other hand, nobody can help a clueless web dev.
alpaca128 7mo ago
> driving cars or flying airplanes started as just a hobby Those still are hobbies, you just need a license for it now. Which makes sense since crashing an airplane is a bit more devastating than crashing a computer. But most hobbies don't need a license and aren't a danger to others.
- shadowgovt 7mo ago
  I think we've reached a point where we're really turning our heads and squinting away from reality if we think that computing is a hobby that no longer poses danger to others. A person using their own machine can hack all manner of other people's machines without their consent. On the flipside, a person who is not even malicious, but negligent, can configure a machine on the open internet with open ports and become part of a botnet in a half-hour. Perhaps these behaviors imply a level of responsibility that suggests licensing to use the shared resource that is "The internet" is appropriate.
  - alpaca128 7mo ago
    And a person using their pen can hack other people's brains, yet free speech is more important. I think manufacturers being required to provide longer security update support against hacks etc would be more helpful than violating privacy and restricting access to "protect" people. The amazing protective walled garden of mobile devices has mostly caused people to even forget what filesystems are and normalized subscriptions for the most basic things. A license for internet access or whatever would be an incredibly bad idea for anyone but abusive governments and corporations.
    - shadowgovt 7mo ago
      We do, in practice, impose all manner of limitation on free speech while still maintaining the sanctity of that right. Lying in a professional capacity is fraud and punishable even though it's "just words." Being wrong as an engineer or lawyer can cost you your license to practice (as an engineer, even if you never turned a wrench but your directions to build the thing were flawed beyond the reason of the standards of the profession). "Wire fraud" is an aggravation atop regular fraud. These protections could go further, but they haven't. Why is it just "okay" that someone can call you up on the phone and convince you that your loved one is in mortal peril and you have to wire money to them right now? Why is the party transiting that fraud or providing the wires connecting entire fraud offices to the global telephonic network not responsible for enabling that attack?
GoblinSlayer 7mo ago
What are the outsized consequences? They are trying to regulate voodoo.

iamnothere 7mo ago

You’re arguing against freedom of computing, itself an extension of freedom of thought and freedom of speech. These laws are an attempt to regulate not just what you do with your computer, but how it operates. This is fundamentally an attack on rights and freedoms, and if it goes unchallenged then it will expand into other areas. Maybe that doesn’t move you; it seems like you don’t care much for personal liberties. (A Euro, go figure.) But this is America and we have constitutional guarantees here.

Apocryphon 7mo ago
Freedom doesn’t flow one way though. Their GDPR example just gives freedom to non-state malefactors to impinge upon user freedoms. You’re crying about 1984 and they’re crying about Neuromancer. An age-old dilemma. https://theonion.com/the-future-will-be-a-totalitarian-government-dystopia-v-1819594281/ https://theonion.com/the-future-will-be-a-totalitarian-gover...
shadowgovt 7mo ago
You have made some fascinating assumptions about the person you are addressing. I recommend refraining from that in the future and instead asking why a fellow American takes a position other than the one you hold. Two guys built a website to try and help people curb their undesired sexual proclivities and because they were bad at security, their users' personal information (including their own logs of their sexual proclivities) is leaked. They will see no consequences other than "oops, oh well, I guess we're going to shut down our website now and, probably, build another one." Why is that okay? We've de-facto operated as if it os okay for decades under a notion of "user beware," but that notion is increasingly incompatible with the goals of treating Internet access as a human right because if you let everyone on, you are definitely letting people on who lack the capacity, knowledge, or savvy to beware. And we lack a framework for holding "two guys who just told the world how often you jack off" accountable for their violation of confidentiality. Individual users become nodes in botnets. Individual users have their identities compromised. Individual users are talked into being kidnapped by anonymous victimizers. Individual users are, increasingly, everyone's concern the moment they connect to a shared network. And, perhaps most significantly to this topic: the Internet does not distinguish between two guys building a hobby app and a professional service. This specific notion, age-gating access, may not be the right step. But we should be a lot more serious about taking more than zero steps. The time of effing around and pretending there are no consequences to these technologies is over.
- iamnothere 7mo ago
  If you’re an American and you want to change this, feel free to propose and pass an amendment. That’s the allowable process for changing what the government can and can’t do regarding individual rights. Edit: removed part of my comment because misunderstood your rambling point about that website, and I guess I have no idea how it relates to OS regulation. Websites are not operating systems. Your ability to tell me how I run my systems stops at my door, especially if I’m not hosting commercial services. Again, that’s just a question of fundamental rights.
  - shadowgovt 7mo ago
    Conversely, you're an American and you want to change this, feel free to propose and pass an amendment that makes regulation of OS as a product the concern of the federal government, as opposed to (as per the 10th Amendment) a state government concern. These regulations are state affairs for the same reason that glyphosate is known in the state of California as a carcinogen (but not other states). Product standards are, generally, a state-level concern. I agree this is inefficient, but the burden to modify the Constitution is on those who would change that inefficiency. I appreciate the grace in taking a step back on my other comment; I phrased it poorly. Here's my point in better summary: I think we have an issue right now where our hobby has two things that are true that have significant negative societal outcomes. And to be clear, I'm primarily responding to this comment: "Who is providing them with legal indemnification since they are now apparently subject to fines for a fucking hobby if they do it wrong?" Because the answer to that is "If these things are true, it doesn't matter." 1. There is very little daylight between professional and hobby coding. That has been one of its virtues: a person with the right idea can garage-hack way into becoming Fark, or Slashdot, or Craigslist. But the flipside of that coin is that a kid messing around in their garage can cause real consequences for real people they will never even meet. How many websites are falling over from people experimenting with AI crawling right now (at disregard for the existing best-practices for crawling)? 2. A lone actor misusing the machine can have large-impact consequences on strangers. A kid in their basement doing script-kiddie garbage can exfiltrate confidential data, steal someone's electricity to mine Bitcoin, or even just wreck their machine remotely, for fun. A lone actor with no malicious intent but simple negligence can drop a machine on the Internet with all the ports open and become a botnet node. When we have sitautions like that in the past, we often use licensure to ensure some minimum standard of care when using the shared resource. In fairness, what may want to be licensed here is using the Internet, not installing an operating system. I think that's a fair point and state governments trying to move the issue to the OS, not network-connectivity level, are making a mistake.
bee_rider 7mo ago
This site is hosted in America, but in general I think they get the Internet in other countries now.

GuestFAUniverse 7mo ago

Simple: the fail2ban jails need the logs to keep the bots away, that prevent a proper operation. Thus it is technically necessary. And this is explicitly allowed as part of the GDPR. On the other hand, nobody can help a clueless web dev.

alpaca128 7mo ago

> driving cars or flying airplanes started as just a hobby Those still are hobbies, you just need a license for it now. Which makes sense since crashing an airplane is a bit more devastating than crashing a computer. But most hobbies don't need a license and aren't a danger to others.

shadowgovt 7mo ago
I think we've reached a point where we're really turning our heads and squinting away from reality if we think that computing is a hobby that no longer poses danger to others. A person using their own machine can hack all manner of other people's machines without their consent. On the flipside, a person who is not even malicious, but negligent, can configure a machine on the open internet with open ports and become part of a botnet in a half-hour. Perhaps these behaviors imply a level of responsibility that suggests licensing to use the shared resource that is "The internet" is appropriate.
- alpaca128 7mo ago
  And a person using their pen can hack other people's brains, yet free speech is more important. I think manufacturers being required to provide longer security update support against hacks etc would be more helpful than violating privacy and restricting access to "protect" people. The amazing protective walled garden of mobile devices has mostly caused people to even forget what filesystems are and normalized subscriptions for the most basic things. A license for internet access or whatever would be an incredibly bad idea for anyone but abusive governments and corporations.
  - shadowgovt 7mo ago
    We do, in practice, impose all manner of limitation on free speech while still maintaining the sanctity of that right. Lying in a professional capacity is fraud and punishable even though it's "just words." Being wrong as an engineer or lawyer can cost you your license to practice (as an engineer, even if you never turned a wrench but your directions to build the thing were flawed beyond the reason of the standards of the profession). "Wire fraud" is an aggravation atop regular fraud. These protections could go further, but they haven't. Why is it just "okay" that someone can call you up on the phone and convince you that your loved one is in mortal peril and you have to wire money to them right now? Why is the party transiting that fraud or providing the wires connecting entire fraud offices to the global telephonic network not responsible for enabling that attack?

GoblinSlayer 7mo ago

What are the outsized consequences? They are trying to regulate voodoo.