anf

It's not binary: bosses and investors want to know who will obey the rules as you see them for a variety of reasons. They'll fund / promote based on the needs of the projects you will likely face.

With tillerhq.com, you can set up a pretty nice workflow to review your spending daily, weekly, or whatever cadence makes sense to you across all of your accounts, and it's only $79/year! :)

I like Elon, too, but "no qualifications to run a rocket company" is simply delusional. He majored in physics at Penn and econ at Wharton and went to grad school at Stanford studying material science (for two days, just enough to get to signal being smart). I have a harder time imagining what kind of background would be better being CEO of a rocket company.

If he runs Twitter like 4chan, it will surely fail, but I think he has more to his plan than he is willing to share publicly at this time.

I don't think likes are meaningless — they tap into a very primal need for social status and peer approval. It's a stupid game, but like many other stupid games, it's effective!

As someone who left Facebook awhile ago mostly because life got busy, those ads seem to solidify an (alternative?) narrative of why I left rather than urge me to come back.

Is there no laws w.r.t. negligence that can be used to punish negligent actors? If a door manufacturer is negligent in their construction of the door and someone gets robbed as a result, in violation of how they expected their door to work, is there nothing currently in the law that could help them?

Do you send user data anywhere in a way users may not expect? If not there's probably nothing to comply with. It's really the opposite of bureaucratic law — the entire thing is quite readable and reasonable.

Because he's lazy and thinks he'll get away with it. He'll come into compliance after penalties outweigh the costs of changing the way he does business. This is probably the reaction of the vast majority of folks dealing with customer data, and not at all unexpected — they have a business to run, and costs to customer privacy are an externality being rolled into their costs via regulation.

Seems like you can both be right in different circumstances. Humble Bundle got to a nice acquisition married to GCP. Snapchat has successfully unwound. I haven't looked into it in depth but it seems examples on both sides abound.

nvm, the article mentions it. cell phones check in with the tower while they are on, which is a way to track where someone has taken their cell phone. afaik, there's very limited privacy protections around this in the US because they are considered the business records of the cell company.

Yeah, totally with you — don't trust devices you (or your employer) doesn't own. I'm borderline still where I trust my employer's devices with my personal passwords sometimes, but even that seems a bit iffy.

What's a call record? Like a single phone call or an SMS? Pinging the tower doesn't count, does it?

If you can prevent a company from acting unethically and you have the capacity to do so, are you not ethically obligated to try?

(switching sides of argument, I know)

fair point. my thoughts were that spending your time building $10 widgets and getting paid $5 by someone who is negligent with their use of people's passwords is akin to working for a company that pollutes public waters: some of your paycheck is "tainted" by the dangers you put others into, and you are smart enough to understand it. in that sense, quitting seems like a non-act, because you stop acting unethically.

I'm guessing you're referring to someone's ability to actually fix it -- in the case of logs, you can make a pretty simple regex to strip out all kinds of PII, and there really are a lot of arguments (e.g. proactively reducing cost of security audits -- if someone is reviewing your logs to figure out what happened, they might not want to see customer data).

Key logger + making a cron job that copies everything off your drive = 5 minutes of work? I hope you trust the folks you use this setup on...

You should quit. I know you have reasons, but continuing to work at a place like this is not ethical.

Definitely doesn't have to be on purpose.

Try building a scalable database to billions of users on ad revenue and make it retrieve all data from years ago within the time constraints that users want to see newsfeed items in, you'll see ;)

Did they re-appear after you had remembered deleting them, or were they just not fetched when you looked the first time? I think Cassandra might be to blame where it returned a bunch of wall posts but not all of them when you looked back in history the first time.

Is there a way to get them to delete everything? Under GDPR, Europeans certainly can, but then they also lose all of their Facebook friends?

Sigma (https://sig.ma) | Millbrae, California | full-time | ONSITE / VISA | Software Engineers, Designers

We're bringing memberships, certificates, licenses, and credentials into the connected era via a platform built on Scala, GraphQL, and React.

More info: https://sig.ma/jobs

contact eng-apply@sig.ma or andrey@sig.ma with questions

[citation required] but even if true, getting site owners to opt-in to exchanging their user's privacy for psychographic and demographic correlations seems materially different than Facebook's "no opt out" on a relatively unrelated feature like a Like button on a 3rd party site. They used to and could again make the button work without using it to gather browsing data.

Does GA share data outside of GA? Last I looked into it, I came away thinking that data is kept to privacy standards equivalent to e.g. Google Sheets.

Has anyone unlocked a phone using a picture of the owner's finger? That would be neat!

Two-user encryption obviously can be made secure.

I think we're done here.

Your splitting of the hair on "secure but fragile" depends on the assertion that the US government has no interest in maintaining the security of conversations of all US devices? That's inane and insane, respectively.

If it is "fundamentally" insecure, why do Google and Apple and Microsoft and all the other tech companies use it on their employee laptops?

That's totally irrelevant to the point that two-user encryption is fundamentally insecure, made insistently by even those who should really know better: https://www.schneier.com/blog/archives/2015/09/tsa_master_ke...

That sounds like a good endorsement. Those of use who are competent and honest have been pretty tired of the FUD and downright lies around the benefits of single-user encryption.

Specifically, if admin master keys are so dangerous, why does Google, Microsoft, and every other tech company have one into the employee's hard drives?

Sigma (https://sig.ma) | Millbrae, California | full-time | ONSITE / VISA | Software Engineers, Designers, Marketing Director

We're bringing memberships, certificates, licenses, and credentials into the connected era via a platform built on Scala, GraphQL, and React.

More info: https://angel.co/sigma-certified/jobs/130819-software-engine...

contact eng-apply@sig.ma or andrey@sig.ma with questions

Don't gather data you can't manage it ethically.

Facebook has a responsibility to protect user data they have collected, and if they can't then they shouldn't.

Why would they ever discard that? Why would there be a granularity where ML suddenly stops working? Why would you even stop at one model per person, instead of one model per mood, or modes of thought at different stress points?