• 0 Posts
  • 76 Comments
Joined 3 years ago
cake
Cake day: July 1st, 2023

help-circle

  • I’m gotta get downvoted and cause a stir with this. Here goes anyway for the all of 5 people it might reach.

    I would love. FUCKING LOVE for a candidate like AOC to get elected president of the United States. Love it.

    HOWEVER.

    Until there is enough power transferred in the senate and the house to candidates that would remove the current structure of how we elect the executive office; they are not electable.

    See, you read that sentence thinking what I said was an opinion and pessimism. It was not. It was based in the statistics of how Americans vote and how strong the votes in various states are in a first past the post electoral system that uses an electoral college.

    As it stands, and Nate Silver backs this math as well, the electoral college requires a moderate democratic candidate to overcome a 3.7 point disadvantage. That might sound small. It isn’t small. It’s the margin of victory in many races so, you effectively need to more than double the current margin of victory for a candidate, and so it when further left candidates have a harder time than that.

    Jeff Jackson could make a run for office in 2028-2032 and be a candidate that historically could get elected. Statistically.

    AOC is just not electable in the current structure of the electoral college and state first past the post voting that still persists in most states.

    You run the virtue candidate and lose the election.

    The same was true of Harris in 2024. Not because we don’t deserve a black woman president or that she couldn’t do the job.

    She wasn’t fucking electable in this racist, sexiest voting base.

    I get we want better candidates, but you can go too far and effectively give the election to the fascist asshole, and frankly the country can’t have that happen again post Trump. It will be the end of democracy as we know it if It does.

    I know that isn’t what folks want to hear but the math is the math.




  • Sigh

    Please show me your masters in computer science and your decade of working with the devices. No? Then let me help you out.

    It could be fine IF they configured everything correctly and are enforcing things on the work profile. Or, it could be terrible IF they just said “install this app, that’s it”.

    That is true of ANY solution. If they violate this, then they are federally liable. Nothing about who owns the device changes this so it is a non-starter.

    Having a company provided device with poor guardrails would at least mean it’s not a device that the staff would do their personal stuff on, installing random apps.

    First, applications concerning healthcare data are going to operate in both encryption at rest and encryption in flight. They will isolate all data flow to just that app and its external managed connections. So what other things you have on the device from an App Store are irrelevant.

    Having a company provided device with strong guardrails and fully locked down for this purpose would avoid most of the risk of an undiscovered vulnerability being abused.

    I don’t think you understand ANYTHING about how security profiles are loaded onto a device. I will keep this to an explain like I am 5 level. None of what you just said is true. It does not matter who owns the device. If they are using it , for work, and work manages conditional access policies on the device, with security policies loaded, it will enforce ALL of the same things for monitoring data flows inside apps relevant to the workplace. It will enforce OS versions or kick your ability to authenticate. There is NOTHING that device ownership will change. Repeating this makes it very clear you have no idea what the fuck you are talking about.

    However well the work profile stuff is now separated in mobile OSs today, there can always be day 0s, and people will install any random apps on their phones or fall for plain social engineering. Maybe technically right now they’re comparable for security, but their risk profile is different I think.

    You think. Yes, you think, because you don’t do this for a living nor have the slightest clue what you are discussing. Again. Zero day exploits are going to be the same no matter who owns the device. They impact software under the same managed rules that exist regardless. It doesn’t change if it is a company device. Holy shit.

    Imagine just targeting this place for phishing and creating a similar looking app with the same name, then sending fake communication to staff to say there is a new version and install it. They can just install it on their personal profile even if the work one doesn’t allow it and start putting data in it. In the case of a locked down work device they could just not install it. Also, there’s no reason for these devices to leave the grounds whereas personal devices will need to go out into the wild.

    The reverberation speaking this much out of your ass must be immense. The whole point with a security profile is it limits these actions, and the security profile on the device is THE FUCKING SAME whether it is a device owned by you or the company. Once the employee has it configured correctly, the same in tune, same defender policies, the same OS management, the same everything could be used.

    Maybe if you consider it a personal device if the staff has to relinquish all control of their entire personal device to the work provided security controls they can achieve a similar risk profile, but at that point it’s just a work device the staff had to pay for, not their personal device.

    Jesus wept. You don’t relinquish control of he whole device. Unless you are working in a SCIF, your physical device is not going to have the type of controls on it that need to prevent any access to Bluetooth or WiFi. It will be only managed insofar as the profile for security requires it to be. That means you selectively block actions and abilities related only to the data within the app context and surrounding risk vectors. I’m typing this on a phone with a security profile on it for work. It serves as my Authenticator, has work application data, and doesn’t have to interfere with other personal use. You have a fundamental misunderstanding of how ANY of this works.

    If you walked into Palo Alto today and sat down at the table with their engineering team, would you be telling them their firewall solution is flawed without knowing anything about it? I hope not. So why do that here?













  • It’s from A Man for All Seasons, a play that illustrates the importance of the rule of law.

    William Roper: “So, now you give the Devil the benefit of law!”

    Sir Thomas More: “Yes! What would you do? Cut a great road through the law to get after the Devil?”

    William Roper: “Yes, I’d cut down every law in England to do that!”

    Sir Thomas More: “Oh? And when the last law was down, and the Devil turned 'round on you, where would you hide, Roper, the laws all being flat? This country is planted thick with laws, from coast to coast, Man’s laws, not God’s! And if you cut them down, and you’re just the man to do it, do you really think you could stand upright in the winds that would blow then? Yes, I’d give the Devil benefit of law, for my own safety’s sake!