Kalium

30 ms·

301.
by Kalium 4y ago
That depends greatly on if the systems in question are expected to provide universal service or not. This is perhaps the crux of the question - do we expect Google to operate as a public service capable of delivering service in a way that m
302.
by Kalium 4y ago
This feels ever-increasingly like asking Google to cover the role of a government agency. Universal service is something we expect of government agencies. It's rarely something we expect of private enterprise. The whole "community
303.
by Kalium 4y ago
Gmail already has a system for using one account to unlock another, so no changes required there. A bank, USPS, or DMV generally requires ID or other identifying documents. The people we're trying to help often struggle to retain physi
304.
by Kalium 4y ago
> I am, yes, if the alternative is that they loose access to their account every few months! Good to hear, though I confess to a bit of confusion. The issue I pointed to is that they're going to lose access to their accounts frequen
305.
by Kalium 4y ago
OK. That raises all sorts of follow-up questions, as turning off security measures can be expected to have consequences. What should Google do in the scenario that this purposely-low-security-for-the-unhoused account is breached? What about
306.
by Kalium 4y ago
What is the ask that is overwhelmingly reasonable? As has been pointed out to me and others, Google already offers a way to turn off 2FA - https://support.google.com/accounts/answer/1064203 Naively this seems like
307.
by Kalium 4y ago
I have the nagging sense that what we're seeing amounts to throwing one's hands in the air and exclaiming "There must be a way!" As others have pointed out, turning off 2FA is available. Apparently that doesn't work
308.
by Kalium 4y ago
Ah! Then the problem is solved, I suppose.
309.
by Kalium 4y ago
While I agree that empathy is the motivation and starting point, I do want to note that a lot of people in this discussion do seem to sincerely believe that this problem would be easy for Google to solve if they just cared enough. The frami
310.
by Kalium 4y ago
The problem here boils down to this: how does this help people who don't have secure, reliable storage for off device backup?
311.
by Kalium 4y ago
It seems to me that Google is in full control of what they've built here. They've chosen not to put in the effort to find a way to meet the needs of this portion of their user community. On the one hand, this can be quite reasonab
312.
by Kalium 4y ago
To be clear, your answer to vulnerable people needing protections is to lower the minimum level of security for everyone using Gmail. Do I understand correctly?
313.
by Kalium 4y ago
You're absolutely right. Now let's talk about how much effort and what level of resources it's reasonable to expect a commercial entity to invest in extending protections to vulnerable people in need who happen to not be cust
314.
by Kalium 4y ago
OK. Let's play a game. Let's say I care. Let's say I care a lot . I care so much that I'm willing to make it my personal problem to address the very real, very pressing needs of a critically vulnerable and marginalized
315.
by Kalium 4y ago
A lot of these things can't be meaningfully statically checked. It has to be done by a working policy apparatus. If your org can't adopt, implement, and adhere to policy then there's no amount of standards documents in the wo
316.
by Kalium 4y ago
That kind of divide ultimately falls apart. Over time, things built in dev mode rely more and more on its insecurity and production systems get pushed that way. This is why development systems need to be as production-like as possible. Othe
317.
by Kalium 4y ago
Looking at the guide, much of the hardening is above and beyond anything any Kubernetes configuration can be expected to do. Thus there is literally no way to ship a pre-hardened Kubernetes that has to be softened with a checklist guide. Mu
318.
by Kalium 4y ago
I've known engineers who would swear up, down, and center that using Haskell or Lisp or Clojure made them more productive. More features, better, and faster. From the outside, I didn't see any evidence of this. The people who were
319.
by Kalium 4y ago
Yeah, that's plausible. They don't care about drugs and adultery. They care that it's leverage. If the world already knows, it's not leverage.
320.
by Kalium 4y ago
Sometimes there are issues beyond the... creative representation of the candidate. From the company's perspective, this could easily land them in legal hot water as they now have no idea who the "employee" is or what their le
321.
by Kalium 4y ago
The thing about security is that it's perfectly fine to not have it most days. Suddenly, all at once, it's not fine at all. A very large company has an exceptionally bad time and a lot of people are affected. Small startups and bu
322.
by Kalium 4y ago
> In startups, its not uncommon to have engineers who have been handling various responsibilities, including security (especially early employees). You're right! That said, by the time a company is large enough that 17% of it is mor
323.
by Kalium 4y ago
They can be, but in large parts of Michigan they haven't been - a quick check says 15% of power lines are buried. So any weather event that risks damage to tree limbs also risks power outages.
324.
by Kalium 4y ago
To add to this, there was a major storm last week that knocked out power for significant chunk of the Detroit area for up to three days. That's in August, mostly from wind.
325.
by Kalium 4y ago
They can be, provided that disclosure is handled up-front and the contract is structured for it. Dropping that on someone who had every reasonable expectation - and possibly even contractual language - about you doing the work yourself is q
326.
by Kalium 4y ago
As far as I'm aware, KF didn't come with the kind of direct liability under US law that sex work content does. I welcome the chance to learn that I'm wrong here!
327.
by Kalium 4y ago
It's not difficult to say, but it can be difficult to live at any meaningful scale. That invites endless pressure campaigns and similarly endless accusations of acting arbitrarily, capriciously, or with insert-bias-or-agenda-here. None
328.
by Kalium 4y ago
Is that a rhetorical question or a sincere one? Legal liability. American law has lots of direct liability for Cloudflare under SESTA/FOSTA for being involved in sex work websites. There's not equivalent liability for hate website
329.
by Kalium 4y ago
If I want a bit of clip art for a presentation or stock image for a website, is it disdainful to say it's irrelevant to me if it was made by a living human or a computer? I want the thing. An artist getting paid is a means to an end fo
330.
by Kalium 4y ago
There are helmets you can lock with your bike.

More ›