• 4 Posts
  • 25 Comments
Joined 4 years ago
cake
Cake day: July 18th, 2021

help-circle
  • The problem you’re describing (open sourcing critical software) could both increase the capabilities of adversaries and also make it easier for adversaries to search for exploits. Open sourcing defeats security by obscurity.

    Leaving security by obscurity aside could be seen as a loss, but it’s important to note what is gained in the process. Most security researchers today advocate against relying on security by obscurity, and instead focus on security by design and open security. Why?

    Security by obscurity in the digital world is very easily defeated. It’s easy to copy and paste supposedly secure codes. It’s easy to smuggle supposedly secret code. “Today’s NSA secrets become tomorrow’s PhD theses and the next day’s hacker tools.”

    What’s the alternative for the military? If you rely on security by design and open security for military equipment, it’s possible that adversaries will get a hold of the software, but they will get a hold of software that is more secure. A way to look at it is that all the doors are locked. On the other hand, insecure software leaves supposedly secret doors open. Those doors can be easily bashed by adversaries. So much for trying to get the upper hand.

    The choice between (1) security by obscurity and (2) security by design and open security is ultimately the choice between (1) insecurity for all and (2) security for all. Security for all would be my choice, every time. I want my transit infrastructure to be safe. I want my phone to be safe. I want my election-related software to be safe. I want safe and reliable software. If someone is waging a war, they’re going to have to use methods that can actually create a technical asymmetry of power, and insecure software is not the way to gain the upper hand.




  • Adding to what others in thread have said, there are languages that are more usable and are more user-centric.

    SFW edit: There are automatic transmission cars and manual transmission cars, both made for humans, one easier than the other. There are calculators that can compute lots of values and mental math classes, both for humans, one easier than the other. Ergonomics matter.

    Although I do concede that, depending on the context, knowing more about something is better than not. I wonder what happened to the original meme’s author for them to create the meme.


  • Fair points:

    • I see how that joke can be fine in the sense that, if everyone in the group shares values, there is no need to consider how a staunch Trump supporter will respond to the joke. After all, I think there are very few staunch Trump supporters reading this.
    • I also see that it can be very hard to convince people to reconsider tightly-held beliefs, or at the very least gain perspective on them. It sounds like you do not believe changing perspectives is even possible, that no dialogue can ever be worthwhile or useful.

    I see you appreciate facts and information, the scientific process and the institutions that enable it. We have that in common. That’s why, ironically, I’ll start with anecdotal facts and then move on to more robust and generalizable findings. Do you know about my friend who went from defending “one dollar, one vote” (a couple of years ago) to explaining how the lack of third spaces is associated with inequality (a couple of weeks ago)? I don’t expect you to at all, so do you know Contrapoints’ impact on radicalized people who reach out to her (https://www.vice.com/en/article/contrapoints-interview-2019-natalie-wynn/ https://www.youtube.com/watch?v=2Nrz4-FZx6k)?

    These may sound like cherry-picked examples, but there’s actually evidence of massive shifts in people’s political views: the World Value Survey. Do you know how world values have changed ever since the WVS started (https://www.youtube.com/watch?v=wIXdRVe92gg)?

    In the face of the WVS shifts, it may seem like value changes only occur when material conditions allow for it, but there’s evidence within the WVS literature (check out the variance that explains democratic values, in particular how material conditions most explained democratic values in the past but today connectivity most explains it) that material conditions are not as important. However, we can also look at another set of scientific literature that shows that the way that things are presented can lead to changes in political attitudes. Do you know about the moral reframing literature? I’m sorry for the paywall https://doi.org/10.1111/spc3.12501 https://www.researchgate.net/publication/337861541_Moral_reframing_A_technique_for_effective_and_persuasive_communication_across_political_divides



  • I do see how the narrative in the headline could be a call to action, but the article doesn’t propose a solution behind which the audience can rally. At most, the article describes how Americans can interpret the inevitable defeat. Of course, this text doesn’t exist in isolation; other texts would have to do the heavy lifting so that Americans rally behind a war effort.




  • I agree that we shouldn’t jump immediately to AI-enhancing it all. However, this survey is riddled with problems, from selection bias to external validity. Heck, even internal validity is a problem here! How does the survey account for social desirability bias, sunk cost fallacy, and anchoring bias? I’m so sorry if this sounds brutal or unfair, but I just hope to see less validity threats. I think I’d be less frustrated if the title could be something like “TechPowerUp survey shows 84% of 22,000 respondents don’t want AI-enhanced hardware”.


  • You’ve got a good point. I wonder if this an example of a trade-off between convenience and security. If you’re logging in and you get an MFA prompt, a Yubikey has to be physically searched, while Bitwarden or Proton Pass only have to be clicked. A Yubikey can only hold a limited amount of accounts, while Bitwarden or Proton Pass could hold many more. Of course, a Yubikey could be used as MFA for Bitwarden or Proton Pass, but that would create a single point of failure and reduce factor separation (which I think is your original point).

    While I posted a Bitwarden or Proton Pass recommendation of sorts, I genuinely wonder if it’s advisable to not use MFA at all if the factors will not be separated. Or, perhaps, the best security solution is the one you’ll actually use. I guess the answer is the good ol’ “What’s your security model?”








  • EDIT BEINGS HERE

    So I actually watched a talk by the person who coinded “enshittification”, Cory Doctorow, recently, and I have changed my perspective about Kagi. I no longer think Kagi is doomed to enshittify.

    Enshittification requires advertisers. As long as Kagi finances itself with money that does not come from advertisers, it will not enshittify.

    This does not mean that it’s not problematic that their code is closed-source.

    EDIT ENDS HERE

    I like what I hear about the user experience, but there are many problems I see with the service.

    For one, it’s based in the USA, so it is legally subject to the insane, antidemocratic, and awful state surveillance there.

    It is also a corporation, so it is subject to enshittification. Currently, it is giving users loads of stuff so that users use it, but sooner or later investors will want their money back and Kagi will enshittify.

    Finally, these two problems would be mitigated by open-sourcing and making libre their software. With that, alternatives in more sensible legislatures could open. Users could migrate to instances that are still libre and not enshittified.

    It is really unfortunate that Kagi is doing so many things well while doing some fundamental things terribly. As it stands, Kagi is doomed to enshittify.


  • snek_boi@lemmy.mltoLemmy@lemmy.mlPolitics blocklist
    link
    fedilink
    English
    arrow-up
    4
    arrow-down
    6
    ·
    edit-2
    2 years ago

    “Elections”, " representative", and “federal” could exclude many non-American and non-Canadian countries.

    Edit: Oh, silly me. I misread. I thought you wanted to exclude American stuff, not “political” stuff. Well that’s another conversation. Is there something that is not political? Is there something that doesn’t comment on the distributions of political goods such as significance, relevance, resource allocations (including time and attention), or value judgments?


  • I see how majority judgement could be seen as a subset of range or score voting.

    A crucial difference between range/score voting and majority judgement is that one uses numbers and the others judgements. A majority judgement ballot could list all the possible candidates or options, and for each of them, there’d be a list of possible judgements. You can say that you consider a candidate “terrible”, “bad”, “meh”, “good”, “amazing”.

    The idea is that humans tend to think in terms of judgements more readily than with numbers. A good ballot would find what words evoke useful judgements for candidates, as each group of voters has its own social language.

    For example, with my partner we have a list of movies that we vote on. We have judgements that include “I’ll leave the house if you play that sh*t”, or “Omg yes!”. It’s great to add a movie to the list and find that one of the judgements in our made up ballot matches our personal judgements so well!

    This is something I think majority judgement can do better than range/score voting: it can reflect human judgements better than with scores. In that way, it is more intuitive than range/score voting.

    One benefit of majority judgement is that leaders chosen through it would know the judgement that they came into power with. If someone is elected into a powerful role knowing that half of the voters think they’re “ideal” for the job, that’s quite different than knowing that they were elected with half the voters thinking they were “inadequate”. This means, ideally, that the legitimacy of incompetent leaders can be reduced.

    Note that the amount of possible judgements in a ballot can vary. To make things quick and easy, I’ve had silly elections with three judgements, such as “nope”, “ok”, “omg yes”. I’ve also had elections with nine judgements.

    If you want to reduce the probability of having multiple winners, more judgements are a good idea. In general, the amount of judgements should depend on what the stakes are (higher stakes should go beyond just a couple of judgements), how many options there are (few options require few judgements), and the amount of voters there are (few voters require many judgements).

    I think the reason for using the median is so that a judgement can be chosen as representative of each candidate. In the “nope”, “ok”, “omg yes” example above, if the median of the winning candidate is 3, you can tell the candidate that the score that they were chosen with was “omg yes”. If the average of the winning candidate is 2.4, you can’t really translate that as succintly, given that 2.4 is between “ok” and “omg yes”.

    I hope it’s clearer why I love this voting method!