loudwhisper

joined 2 years ago
[–] loudwhisper 3 points 1 day ago

Porsche is German I believe. Maserati is Italian.

Yeah indeed they are not comparable. I have a huge pickup truck in my building and is on another scale. The problem is also that it's a vicious circle, the more you see cars this big on the road, the more you don't want to be the only one with what looks like a go-kart in comparison.

[–] loudwhisper 3 points 1 day ago (2 children)

Sorry, but your spelling was too funny and I have to nitpick. Porsche and Maserati*

I said funny because you might want to look up what "porche" means in colloquial Italian.


Indeed these are generally super/sports car, and you see very few of them in Europe, except for exceptionally rich places. Even in Europe though you see many SUV in cities and I started seeing more and more huge tanks (like pickup-trucks), which I think are more common in US right now.

[–] loudwhisper 2 points 1 day ago* (last edited 1 day ago)

If I were in the security team of that company, I would never accept ACLs on the bucket as a sufficient compensating control for this risk. Here the ~~best~~ most reasonable would be encryption, which would make the bucket being public relatively unimportant.

When you are collecting so sensitive data (potentially including personal data of people not using your service), you simply can't even imagine doing that by storing the data unencrypted.

Edit: grammar

[–] loudwhisper 4 points 1 day ago

Because it's unnecessary in almost all cases. So far there is only one community which forbids people to comment based on who they are, but otherwise the rules boil down to standard acceptable behavior according to common sense. It's also a nuisance for users: I am quite sure nobody wants to click several times and be derailed to check rules (on mobile) for every comment they want to write in every post they see on a feed. If this would be expected as standard behavior, I would guess even less interactions will happen.

[–] loudwhisper 21 points 2 days ago

Based on the comments here and in the previous similar post I have seen, the vast, vast majority of people (presumably men) highlight how this is a problem of visibility of posts in public feeds.

It's a tradeoff between having the community public for discoverability and accepting that many people will not check the rules and violate them, some inadvertently.

The alternative is to make the community private, and accept that women will need to discover a women-relates community by searching for "women", which doesn't seem incredibly unlikely.

From the sentiments I read, most people wouldn't care at all if the community was private and wouldn't have a desire to "invade" it. I definitely feel part of this group.

Considering that it's in the interest of the community (apparently) to have only women, I think it's fair to expect the (minimal) effort from future members to look for it (plus advertising it in posts etc.) on them instead of expecting the vast majority of the users (the fediverse is mostly males) to add friction and having to check the rules of every single community of every post they open (now it might be a community, more might come). Yes, community rules are important, but being realistic, if you don't behave like an asshole you don't need to worry about them in 99% of the times.

However, if this tradeoff is not deemed acceptable, I think there is no point complaining about people "invading" women spaces because it's guaranteed that many people will comment without reading the rules, as I am sure the almost totality of users does all the time. Even without counting the ones who intentionally violate the rule, there is always going to be an organic amount of people who will do so inadvertently.

At this point I think the tradeoff is so clear, that discussing the topic in such a confrontational way looks more like rage-bait than anything aimed at solving the problem.

[–] loudwhisper 0 points 3 days ago

Really annoying interaction. I am out. Cya.

[–] loudwhisper 0 points 3 days ago (2 children)

That's not the argument, and you know it, which you need to understand, now it makes it even harder not to think maliciously about the good faith you bring to the conversation.

In case you actually care about it: I feel your statement not only unfairly characterizes white men (not all of them, taking blame for other demographics too etc., etc.,) which who cares, but also is completely exclusionary of all those women who were are not historically oppressed by white men, for example those in different parts of the world, those themselves part of racial minorities etc., and that's what I think is racist. Of course, in that US-centric perspective the world is the same as for Hollywood disaster movies...

You disagree for sure, but since you were interested in comedy...

[–] loudwhisper 2 points 3 days ago (1 children)

Fair enough.

However, OP stood by his statement:

Including both in the same sentence is because of the common shared group of oppressors, white men.

So I guess your interpretation was too generous, mine slightly too strict.

[–] loudwhisper 1 points 3 days ago (4 children)

You meant to write what you wrote, I assumed...?

But I see we are going in circles. So far you are leaning on "that's the common oppressor" which sounds silly to me if I am being honest. But anyway, whatever. I stand by the fact that your original statement is either extremely US-centric (and frankly a bit racist from multiple points of view) or just generally incorrect. Don't need to convince you or change your mind. So have a good day/evening/whatever.

[–] loudwhisper 1 points 3 days ago* (last edited 3 days ago) (6 children)

Are you implying that minorities aren’t oppressed and don’t need safe spaces?

What? My only qualm is that you added white to a sentence about gender oppression. Of course minorities are oppressed and need safe spaces.

which I assert is true in the vast majority of the world where English (the language we are speaking) is the primary language for the country

What has the language we are speaking (which is not even my language) to do with what is "historically" true or not? Is this just a classic example of US exceptionalism or what?

Including both in the same sentence is because of the common shared group of oppressors, white men.

Minorities are also oppressed by way more demographics than white men (EDIT: example, gay people are also oppressed by non-white men, so technically the common group of oppressor is already larger than white men).

If you want any statement to be true for literally the entire world, then your expectations are unreasonable.

Saying that men oppressed women is a much, much, much more accurate statement, for example. There are always exceptions, but we are talking about different things.

[–] loudwhisper 0 points 3 days ago (8 children)

Absolutely not true. The critique is based on adding a racial connotation to gender oppression, which is completely orthogonal to it.

To be even more frank, saying that women and minorities need safe spaces because white men historically oppressed them is complete bonkers. Women need safe spaces because men historically oppressed them, and that is true all around the world, in almost all communities.

I literally took your words literally, as I quoted and addressed the very sentence you wrote. You decided to add white to a sentence that didn't need it. It's already the second comment where you refuse to elaborate and instead you indulge in meta-conversation. So for the sake of clarity, discard everything I have said so far, and allow me to simply ask what did you mean with that sentence?

[–] loudwhisper 1 points 3 days ago (10 children)

The rest of the critique remains nevertheless.

 

cross-posted from: https://infosec.pub/post/32096847

In the last days I spent a disproportionate amount deleting old accounts I found in my password manager, and mostly because so many companies - despite the GDPR - have rudimentary, manually when not completely nonexistent processes to delete your data.

In this post I describe my process going through about 100 old accounts and trying to delete them all, including a top 10 for the weirdest, funniest or most interesting cases I encountered while doing so.

 

cross-posted from: https://infosec.pub/post/32096847

In the last days I spent a disproportionate amount deleting old accounts I found in my password manager, and mostly because so many companies - despite the GDPR - have rudimentary, manually when not completely nonexistent processes to delete your data.

In this post I describe my process going through about 100 old accounts and trying to delete them all, including a top 10 for the weirdest, funniest or most interesting cases I encountered while doing so.

 

In the last days I spent a disproportionate amount deleting old accounts I found in my password manager, and mostly because so many companies - despite the GDPR - have rudimentary, manually when not completely nonexistent processes to delete your data.

In this post I describe my process going through about 100 old accounts and trying to delete them all, including a top 10 for the weirdest, funniest or most interesting cases I encountered while doing so.

 

My take on how a decade (or more) of using cloud services for everything has seemingly deskilled the workforce.

Just recently I found myself interviewing senior security engineers just to realize that in many cases they had absolutely no idea about how the stuff they supposedly worked with, actually worked.

This all made me wonder, is it possible that over-reliance on cloud services for everything has massively deskilled the engineering workforce? And if it is so, who is going to be the European clouds, so necessary for EU's digital sovereignty?

I did not copy-paste the post in here because of the different writing style, but I get no benefit whatsoever from website visits.

 

cross-posted from: https://infosec.pub/post/16642151

(I have just learned you can cross-post!)

As someone who has read plenty of discussions about email security (some of them in this very community), including all kind of stuff (from the company groupie to tinfoil-hat conspiracy theories), I have decided to put ~~too many hours~~ some time to discuss the different threat models for email setups, including the basic most people have, the "secure email provider" one (e.g., Protonmail) and the "I use ~~arch~~ PGP manually BTW".

Jokes aside, I hope that it provides an overview comprehensive and - I don't want to say objective, but at least rational - enough so that everyone can draw their own conclusion, while also showing how certain "radical" arguments that I have seen in the past are relatively shortsighted.

The tl;dr is that email is generally not a great solution when talking about security. Depending on your risk profile, using a secure email provider may be the best compromise between realistic security and usability, while if you really have serious security needs, you probably shouldn't use emails, but if you do then a custom setup is your best choice.

Cheers

 

As someone who has read plenty of discussions about email security (some of them in this very community), including all kind of stuff (from the company groupie to tinfoil-hat conspiracy theories), I have decided to put ~~too many hours~~ some time to discuss the different threat models for email setups, including the basic most people have, the "secure email provider" one (e.g., Protonmail) and the "I use ~~arch~~ PGP manually BTW".

Jokes aside, I hope that it provides an overview comprehensive and - I don't want to say objective, but at least rational - enough so that everyone can draw their own conclusion, while also showing how certain "radical" arguments that I have seen in the past are relatively shortsighted.

The tl;dr is that email is generally not a great solution when talking about security. Depending on your risk profile, using a secure email provider may be the best compromise between realistic security and usability, while if you really have serious security needs, you probably shouldn't use emails, but if you do then a custom setup is your best choice.

Cheers

 

Hi, recently (ironically, right after sharing some of my posts here on Lemmy) I had a higher (than usual, not high in general) number of "attacks" to my website (I am talking about dumb bots, vulnerability scanners and similar stuff). While all of these are not really critical for my site (which is static and minimal), I decided to take some time and implement some generic measures using (mostly) Crowdsec (fail2ban alternative?) and I made a post about that to help someone who might be in a similar situation.

The whole thing is basic, in the sense that is just a way to reduce noise and filter out the simplest attacks, which is what I argue most of people hosting websites should be mostly concerned with.

 

GoDaddy really lived up to its bad reputation and recently changed their API rules. The rules are simple: either you own 10 (or 50) domains, you pay $20/month, or you don't get the API. I personally didn't get any communication, and this broke my DDNS setup. I am clearly not the only one judging from what I found online. A company this big gating an API behind such a steep price... So I will repeat what many people said before me (being right): don't. use. GoDaddy.

 

I hope this won't be counted as some form of self-promotion, even though I am sharing a post from my own blog.

As a tech worker who works in a Cloud shop, I wanted to elaborate the many reasons why I find working with Clouds terrible, from multiple points of view.

I tried to organize my thoughts in a (relatively long) post, in which both technical aspects and political aspects (which are very related) are covered.

I am sure many people will have different perspectives, and this could be potentially also a nice prompt for a discussion.

view more: next ›