Kalium

52 ms·

481.
by Kalium 5y ago
I've found rationales and similar to be double-edged in practice. They're immensely valuable to people like yourself who just want to understand the point of a question to better implement what its getting at. They're also fo
482.
by Kalium 5y ago
With your excellent corp/software/net breakdown, this feels like it isn't actually aimed at a company-wide level. This feels like it's aimed at a product engineering leader who has no real power over the real corpsec con
483.
by Kalium 5y ago
That's fair! I think you can get a lot of that from modern frameworks, provided you are willing to stick to their conventions and never deviate. It's been my experience that sooner or later, every app has a reason to deviate. Mayb
484.
by Kalium 5y ago
I think one of the key lessons here is that a framework fundamentally cannot be compliant. Too much of what is required is simply beyond what any framework can deliver and a matter of human-based process. I have no doubt of the technical
485.
by Kalium 5y ago
If you have a way to automatically handle all the auditing that goes into evaluating all the not-strictly-technical controls that are part of SOC and PCI-DSS and similar, a lot of people will be very interested. Based on this list, how wo
486.
by Kalium 5y ago
A national average is about two months, from what I can find, depending greatly on where you are and what you're selling. That standard deviation can be quite a pain. It's certainly challenging to plan around an unknown and potent
487.
by Kalium 5y ago
> The schadenfreude is real for me seeing this. A company like Zillow getting into flipping seems questionable to me. The customers are no longer aligned with the company on goals with something like this. It's like when the realtor
488.
by Kalium 5y ago
Sounds like you need a better employer.
489.
by Kalium 5y ago
It's one of those things that works to a certain point. Should you hit that point, the prospect of getting what used to be an enormous amount of money won't hold much appeal to you. You'll know if you're there. You'
490.
by Kalium 5y ago
> Yes, I absolutely think that finding that balance is usually a case of finding the unhappy minimum and not about finding a spot where everyone is happy. I'm glad we agree! Here's where the hot take comes in: we're there
491.
by Kalium 5y ago
You seem like an intelligent, thoughtful, and educated individual. Perhaps you might find it interesting to read up on the history of attempts to pursue the precise balance you suggest is desirable: https://en.wikipedia.org/
492.
by Kalium 5y ago
> I don't think it's that complicated or nefarious. Law enforcement are humans just like us, mostly trying to do their jobs with as little effort as possible. Encrypted communication makes their jobs harder in some cases, so t
493.
by Kalium 5y ago
Would you care to share what you think the valid view points against encryption are? For my own part, I find it helpful to remember that questions over encryption have been ongoing for several decades. Historically, the arguments boiled dow
494.
by Kalium 5y ago
Agreed, it's almost always political. Product has a schedule, developers find it convenient to say "Well, we have a firewall", and now suddenly they can hit the deadline! That they got there by deciding to not validate their
495.
by Kalium 5y ago
How sure are you that you can get your parser and validator correct in every case? And how sure are you that you can correctly define and then notice "quasi-valid" at the edge of the defined spec and implementation? How sure are y
496.
by Kalium 5y ago
A lot of people in those areas would agree with you.
497.
by Kalium 5y ago
It's also worth bearing in mind that the Departments of Commerce, Energy, Homeland Security, and Treasury all have efforts to this effect. And as you say, nobody writes articles about how the Department of Energy helped a solar operato
498.
by Kalium 5y ago
I agree! That said, the person I responded to was to my reading optimizing for getting away from the private health care apparatus as much as possible. Medicare For All does not accomplish that.
499.
by Kalium 5y ago
Popularity and efficacy are wildly different metrics. Further, Medicare is not a system that gets away from the private healthcare industry that parent was criticizing. The VA's integrated system largely does.
500.
by Kalium 5y ago
I picked the VA because it's an attempt at a thoroughly integrated system in a way that Medicare and Medicaid are not. It's not irrational for people to look at the risk of making a worse system and judge for themselves if they th
501.
by Kalium 5y ago
It's also worth bearing in mind that the socialized healthcare system the US does have - the VA - does not have a uniformly good track record. This does a poor job of making the case for a larger socialized system all on its own. Whi
502.
by Kalium 5y ago
I love the idea of data portability and data dividends. I love it dearly. It gets at what are by far the most critical principles here - data sovereignty and data value. So it is with a heavy heart that I similarly always find myself deep
503.
by Kalium 5y ago
I think it's an excellent metaphor! I think it also exposes the core problem. The metaphor rests on knowing intent with certainty. It's perhaps possible that certain clarity and pretty much inferring might not always be the same,
504.
by Kalium 5y ago
If you take as a foundational assumption that the brand name in the search string means the traffic is in some sense owned by the brand, then you're absolutely right. It's essentially racketeering. Certainly brands often view traf
505.
by Kalium 5y ago
The counterpoint that a banker would make is that they're forced into this position by Congress, regulators, and prudence. The alternative that might work is charging businesses fees that vary according to the risk of their transaction
506.
by Kalium 5y ago
From the way you frame this, you seem to think legal or illegal is an easy thing for a bank to evaluate quickly and accurately. Is that a correct statement of your position?
507.
by Kalium 5y ago
You're absolutely right! You can trust that a community, given sufficient time, will act to protect itself in the long-term and thus individual users. This just might not always be the same as every user being maximally safe at every p
508.
by Kalium 5y ago
> That might have to do with the fact that in my experience those BaaS frameworks and other low-code tools are mostly used by teams with a strong focus on product and UI/UX, which don't have deep security expertise or the right
509.
by Kalium 5y ago
Yup, power differential analysis are well-known enough to make their way into Wikipedia: https://en.wikipedia.org/wiki/Power_analysis#Power_analysis_...
510.
by Kalium 5y ago
Apple having any kind of ability to decrypt user contents is disconcerting. It means they can be subpoenaed for that information.

More ›