Kawazoe

@paco@infosec.exchange @nixCraft@mastodon.social @reddy_1975@mastodon.online malicious compliance is a great way to flood them with their own medicine.

@EmilyEnough@hachyderm.io To paraphrase some random professional in the industry no one cares about: "If English and other natural languages were specific enough to describe tasks to a computer, we wouldn't have invented programming languages, and bugs wouldn't happen." (Uncle Bob) Some people just refuse to understand that you can't solve all of your problems by speaking English.

@ravigupta@mastodon.social @mysk@mastodon.social if you ignore they can silently update the app without your knowledge at any point in the future (or the past), and that new interesting pb2au flaw that got published recently. In the real world, it looks more like interesting context to me :)

@osnews@mstdn.social Saying that they use this to detect if you already have CC is a bit diminishing of what they can actually use this for. Any system can use this. It can be their site, marketing emails, ads... or even third party softwares like malware attempting to remotely detect the presence of CC on your machine. I wouldn't be surprised if this was also usable by the Adobe fonts loader for sites using those.

@eltonfc@bertha.social @nixCraft@mastodon.social Chapter 4, Art. 10, explicitly states that "Suppliers of products or services of information technology [...] likely to be accessed by [children] should adopt mechanisms to provide age-appropriate experiences". Chapter 1, Art 2.1 Explicitly list "operating systems" as part of their definition of "information technology product or service". So yes, it does.

@Natasha_Jay@tech.lgbt Every time I hear about AI, I feel like crying... First time it happens because I can't stop laughing! What a take! I'll use that next time I get stuck in an AI-isn-t-teft argument.

@broadwaybabyto@zeroes.ca When I turned 21, I suffered from a one sided pneumothorax. It's basically the inside of your lung that starts to tear from the outside membrane, letting it deflate and crush itself. It starts with a dull pain and climbs until it feels like someone is stabbing you. Of course, this is a life threatening injury. This happened during a calculus class of all things. Out of nowhere I start clasping my chest, and after 10 seconds, I starts coughing in pain and short of breath. No one is doing anything. Could've been an steoke, or anything else. No one is doing anything. I do my best to grab my stuff and leave. I reach the front desk. I can barely stand. Ask them if there's a nurse on campus. No... Ask them if they can call an ambulance... no... I grab the phone and call my dad. I ask him for help. He shows up 5min later, and brings me to the ER. We stop right at the entrance, he leaves the car running, doors opened and help me get in the ER. I can only walk because my dad is helping me. I am clearly struggling to breathe. We get to the triage nurse... She turns me back asking I take a ticket first... My dad picks a ticket... it's the next one... they dont call me for over 30 minutes... When they finally do, they take my vitals. Heart rate is elevated. Oxygen is at 98. Go sit on a chair... low priority... Reminder that at that point, I'm getting tunnel vision from the pain... 26 hours later... Twenty... six... hours... later... A doctor passes by, sees me like I'm fucking dying and calls a code on the intercom. 5 minutes later, I'm doing chest x-rays, he reads them himself, and puts me next in line for the OR. I never seen a hospital turn from boring to someone got shot in a movie level of panic that quickly. I got discharged 7 days later with 3 months of recovery time. The same thing happened for the other lung a year later. They know my history. They knew I was at risk. Same hospital. They still took 14 hours to treat me. I lost my mom a year later from cancer, again due to mismanagement and insanely slow care at that same hospital... I never finished college because of this. My personality changed. I can't really do sports anymore. My mental abilities probably took a hit too... 10 years later. I met the person who was working as quality and safety director in that hospital. He told me that he joined just after my incident. He told me that this is, by far, the worse hospital in the province by every metric, and that everything was against them. It also was one of the poorest region, with over 20% of locals living exclusively on welfare. No one deserves to go through this.

@prism@infosec.exchange @talon@dragonscave.space @MariahL@dragonscave.space @sapphireangel@mastodon.online @techsinger@tweesecake.social @WeirdWriter@caneandable.social @patricus@gts.posix.live I fail to see how this risk is different from Tesla employees watching your car cameras, or Amazon employees using Ring cameras for their benefits, or closer to the original situation, BetterHelp employees leaking your discussions online. In all of those cases, customers of those services had the expectation of privacy, got fooled by the people recording and sharing their interactions with the service, and will never see any reprimand for those behaviors. To me, BME people recording and sharing calls is yet just another case of this. It just happens to target a particularly vulnerable class. This is why I say the problem is the behavior and not the recording itself. Most countries have laws that let you record everything you can see from public view. A large part also have single party consent rights on private conversations. There are rarely any restrictions on what you can record or why. In any of those places, you should assume 100% of your social interactions are recorded and shared without your consent. That's where the problem is. This wasn't an issue when recording meant pulling a giant TV camera and crew, or when the only microphone in your house was a landline telephone. Those laws haven't changed since then, while the technology and social dynamics evolved a lot.

@WeirdWriter@caneandable.social @MoritzGlantz@mastodon.social A lot, and I do mean A LOT of UI work on web tech stacks is just historical overhead. 99% of the code is unnecessary when you target the latest version of Chrome only. 95% of the code is unnecessary if you target the latest version of Chrome, Firefox, and Safari only. It goes down to 90% if you add mobile versions. The issue is that modern UI frameworks have so much extra stuff that can justify their presence in your project. Imagine if it takes 100hrs to make a UI, but there is that one component that's incredibly difficult to do by hand that would take 90hrs to get right in your UI. If you can find a component library if that has that feature out of the box, it doesn't matter the rest of the site can be done in 10hrs without it. You'll have to use that framework for everything if you want stuff to feel cohesive, so you'll spend 15hrs to do the whole site with that framework, even if you end up with 10x more complexity and overhead, just so you can get that single component for free. Those libraries always use cohesiveness to buy you in. No one wants to have 5 different design languages and dev tools to learn and customize in their projects, so all of those frameworks just have to do everything, making them massive and slow moving. They gather bloat until a new one comes in... all of that because you can't just use the components they do great individually.