madez

47 ms·

421.
by madez 9y ago
Thanks for the tip about the cup in meetings. Often these implicit rules are not obvious, so making them explicit is very helpful to work around and maybe even fix them. Humans are guided by stereotypes and superstition and not scepticism a
422.
by madez 9y ago
Given how even small differences in social treatment can make one feel, this must have a dramatic effect. And looking at this evidence suggests it's very systematic, not random and isolated. This is outrageous!
423.
by madez 9y ago
Why do you stay with a system whose developer has proven to act against your interest?
424.
by madez 9y ago
Can you break down your guess?
425.
by madez 9y ago
I completely agree. Scientifically proven methods like independent verification are very important. Yet, it could very well be custom "own" crypto that is verified and then used.
426.
by madez 9y ago
I'm not accusing you of anything. When I wrote > The "don't roll your own crypto" is simply wrong in general then I meant the negation of > The "don't roll your own crypto" is true in general I shoul
427.
by madez 9y ago
Not all "own crypto" is "homemade".
428.
by madez 9y ago
> Don't roll your own crypto, and please, please, do not roll your own injectable medicine. But some people must and did, right? Else we would neither have injectable medicine nor crypto. Instead of simply ruling it out, I argue for
429.
by madez 9y ago
Yes, anticipation of future attacks is reason to warrant security measures, and that's what I tried to convey. More specifically, the fact that a trivial attack didn't happen yet is not always an argument against the need to antic
430.
by madez 9y ago
> The only reason I took issue was because of the adjective "general". Now, that is an interesting and valuable insight for me. I regularly teach mathematics where I need to insist on formal nitpicks when they change the result
431.
by madez 9y ago
I agree with most of your arguments. But using single examples like Telegram in this case is not suited for arguing about the general validity of this rule. If I were lazy, I could say that every cryptographic system is custom to the creato
432.
by madez 9y ago
You are wrong in assuming I don't know about cryptography and it's fundamentals. I'm not a professional expert in them, but I do have formal theoretical and implementation experience. The "don't roll your own crypto
433.
by madez 9y ago
You care about a safe front door even if nobody broke in through it yet.
434.
by madez 9y ago
> the rule of "don't roll your own crypto". There is no such rule in general. In many situations it might be better to use available solutions, but in others it might be better to do something different. It depends on your
435.
by madez 9y ago
> No real names, no user names, no IP addresses. Well, don't record IP addresses in the first place? Or if you need ip addresses for protection against technical attacks like DDOS-attacks, then delete them as soon as possible. What
436.
by madez 9y ago
That is the authorities business. When someone in the street is speaking aloud, then you can't go to them and demand them to reveal their name, even if what is spoken is against the law. You can call the police and they can determine t
437.
by madez 9y ago
When I said ’contract’ without qualifier then I meant any form of legally binding agreement including sale contracts. A contract does not need to be written down.
438.
by madez 9y ago
I see zero chance for the argument that it be unreasonable to adjust backups. Either they are adjusted, or they violate the law, period. Software projects like apache2, nginx, or your favourite website framework should adapt to the GDPR to
439.
by madez 9y ago
Teenagers can agree to contracts, but only in very limited terms. For example, they can buy food in a supermarket. Buying stuff in a store constitutes a contract.
440.
by madez 9y ago
Facebook can be compliant with the GDPR and be profitable. They must change, however.
441.
by madez 9y ago
Law trumps technical means. The privacy regulators have the authority to enter your business and server locations and look directly at the data you have and what you do with it. Also, laws do have an impact even if there is no technical mea
442.
by madez 9y ago
> Along with the protons, neutrons, and maybe the electrons flying around it. That is not how reality works. Stuff is quantum mechanical and has no analog in the macroscopic world. All one can ever see are consequences of interactions.
443.
by madez 9y ago
Why do you equate technology startups with startups that finance themselves with private data (mis)use? Instead of taking profit out of private data one has, it's possible to charge for the service. Alternatively, one can use the data
444.
by madez 9y ago
The reason d'être of the EU is to unite, so I expect eventually all opt-outs to end or to become meaningless. Countries joining the project should have that in mind, and I think they all have and had, even if they're not talking t
445.
by madez 9y ago
It is of no matter where FB is incorporated. Every country can still bring it to court and judge it. The question is then of enforceability. I'm confident the EU can enforce fines on FB, but that is a different discussion.
446.
by madez 9y ago
There are regulations for agreements. In Germany for example, when you rent a flat, the customers have inalienable rights that he can't legally-bindingly forfeit even in written contract form. There is no such thing as a fully free mar
447.
by madez 9y ago
According to the law, you have to give certain rights to the user, including the right to demand cease of use and deletion of the data. So, you do not own the data and are not free to use it however you wish.
448.
by madez 9y ago
> Now Germany - having failed to clone Facebook domestically (StudiVZ) - sits around extracting money on the grounds that users somehow did not consent to their data being used (...) That is an inappropriate accusation. In Germany, large
449.
by madez 9y ago
Thanks so much for it! I naively thought free projects were as resistant as VLC when it comes to manipulation for the sake of money, but big and even often cheered ones gave in. A bad business model can be worse than having none.
450.
by madez 9y ago
If you _only_ care about the number of users, then I see a point. However, at least for non-commercial programs, why care at all about the number of users? The scenario you are drawing is not a proper comparison. There is no reason why a na

More ›