Hacker Newsnew | past | comments | ask | show | jobs | submit | more jdreyfuss's commentslogin

Right, this makes sense to me. If you can cut down on customers' needs to make a decision, you'll increase the likelihood that someone makes a purchase. Building consumer trust by recommending actually good products is in Amazon's interest here


In SF at least, Ubers and Lyfts often treat unprotected bike lanes as drop-off and pick-up zones as well, which adds another dangerous wrinkle for bikers


Definitely an intentional strategy on Medium's part. Guess they think the increase in revenue will outweigh the decline in the number of new articles and readership. They might be right, but the experience for both publishers and readers is much shittier as a result now.


It's not something we hardcore enforce, since it's more about having a fun way to build good security habits with your devices. Being lightly called out in Slack has an impact in and of itself. The actual cookies are just a bonus. But people do like cookies, so there is some social pressure from your peers asking when the cookies are coming!


Checklist author here. Glad you liked the idea!

Figuring out a clean shorthand way to group these best practices was something we definitely thought about. The idea behind using funding rounds was to find something that can work as an easily digestible placeholder for company maturity and capabilities for most SaaS startups. Something closer to “just starting out,” “product-market fit,” and “starting to scale” rather than being specifically about actual funding levels.

Definitely open to feedback if that way of grouping things doesn't resonate!


Maybe this concept should just get rid of the CTO aspect and position it as the "SaaS security checklist".

Then gamify it so that all the technical people in the team can each give their independent rating of how the company performs on each checklist item.

Then give each checklist item and owner and assign action items, status and followup discussion.

The outcome of that is something the CTO would be interested in because it would be a dashboard with accountability.


Cool idea! I like the self-assessment angle.

We wrote this for CTOs since prior to hiring a dedicated security engineer, security responsibilities in a company often fall to the CTO. But really, any more technical person in a company with some ownership or interest in security can leverage this.


The "SAAS security dashboard". Grab that domain!

Features:

- Including an overall alert status red/yellow/green.

- Critical issues rise to the top somehow for the team's attention.

- Mechanisms and best practices for reporting security issues.

- A knowledge base linking to relevant articles on each topic.

- A button must be pressed to say that backups have been tested, failing to do so raises alert level.

- Team members jointly contribute ratings out of 10 for the companies security practice in each checklist item

- Team discussions/actions/priorities.

- Register your companies tech stack with the service and it sweeps the net for security reports about stuff that you use.

- Integrate ansible to gather information about the versions of the software you are using and issue dashboard alerts when stuff in your software stack is vulnerable to attack.

- $5,000/month

- database lives on client site

etc etc

Don't know why I give these ideas away for free. Maybe I'll get onto building it!


I did - early beta. Based on my experience as CISO for SaaS a well as running security engineer team at a Fortune 5 company, performing Tier 1 PCI DSS, NESA, scans, etc https://joinsecurekit.com/


This sounds really good! I've just signed and I would definitely use this. I'd be happy to help with beta testing.

Would you be able to share some details about the pricing and business model?

EDIT: I get a "You are already signed in" error when I try to fill out the welcome form: https://www.dropbox.com/s/bfxfpm2tczbyn7d/Screen%20Shot%2020...


A lot of these features are actually already inside our product Sqreen, but it "only" starts at $250/month.

We're also hiring if you want to help us build the missing items ;)


Yes, it feels like it would be a fairly straightforward econ model actually. If the combined price for all the platforms gets too high and the user experience too terrible, then it's an easy flip to piracy. I get that all these publishing companies are trying to get as close to that line as possible, but as they're (naturally) all interested in maximizing their own profits rather than thinking about the collective industry profit, I don't doubt we'll cross that line before too long


Good food for thought. A lot to consider there.

I think besides the dichotomy of finding your in-group necessitating more clearly defining the out-groups and the harm that can come with that, there's also an underlying question of whether or not being able to so easily "find your people" is a positive thing in sum. It certainly seems positive for marginalized people and for niche fandoms and geekeries and all the usual ways we think about it, but on the flip side of the coin, the same ease also exists for hate groups and those seeking to cause harm.


The KKK and the nazis managed to form and grow without the help of the internet. Also, finding other people who enjoy talking about cars or writing fan fic doesn't have this sort of harmful in-group/out-group dynamic.

So I'm a bit skeptical of the narrative of the piece, especially because there's no actual evidence provided.

My skepticism extends to the broader narrative of this newsletter.

Illich's alternatives -- especially the conviviality stuff -- always struck me as dangerously Utopian: if only we were all the same, then everything would be great.

He's like that well-meaning stoner who asks "why can't we all just get along" and sort of shakes his head and tells you that you don't get it if you ask how, concretely, we're supposed to "just get along" in Gaza or Darfur or Kashmir or any other place where there's a lot of zero-sum resource/power allocation underlying centuries of conflict. The dismissal of real and concrete harms on both sides of conflict is at least unhelpful and possibly harmful.

Conviviality is a nice sentiment, and the world would perhaps be a better place if everyone shared that sentiment. But sentiment is a starting point, not an actual solution. The world's problems are usually too complex to be solved with pure sentiment, and things will go wrong in unexpected ways if you try.

One concrete example: the modern commercial internet's ad-driven information economy elucidates a major flaw with Illich's "Learning Webs" from Deschooling Society: the company that owns the platform just happens to be an ad company. It's a flaw that even the strongest critics of Illich could never have anticipated in the 1970s.

The point is more general: convivial societies only work if everyone is convivial, and there will always be insanely inventive non-convivial people. Even people who are more-or-less decent folks and even people who adopt slogans like "don't be evil" will end up throwing wrenches in your plan.


>Also, finding other people who enjoy talking about cars or writing fan fic doesn't have this sort of harmful in-group/out-group dynamic.

Purely anecdotally, but I beg to differ. There is more than a little bit of tribal hostility on e.g. Tumblr around various fandoms.

To me, the real issue is that surrounding yourself with like-minded people only teaches you to interact with people you primarily agree with and are comfortable with, rather than the more valuable skill of interacting (civilly) with people you disagree with.


> that well-meaning stoner who asks "why can't we all just get along" and sort of shakes his head and tells you that you don't get it if you ask how, concretely, we're supposed to "just get along" in Gaza or Darfur or Kashmir or any other place where there's a lot of zero-sum resource/power allocation underlying centuries of conflict

It just hit me while reading this that stoners are (often) slackers, and it really does make less sense to fight over resources instead of sharing if you start with this mindset.


The Nazis in particular utilised the mass media of the times, most especially audio, public address, and radio, though also video newsreels and cheap paperback publishing, to spread their message.

During and prior to WWII, german advances especially in audio capture (mic), recording (mag tape), playback (speakers), and broadcast & receiver (radio) were decades ahead of the Allies' own technology.

You don't get the Nueremberg rallies without high-quality mics, massive public-address ampifiers and speakers and cinematgraphy (Leni Riefenstahl). Hitler's ability to broadcast live-quality radio addresses across Germany stumped Allied intelligence -- their best recording technologies were wire recordings and low-fidelity vinyl, both with very obvious artifacts (wire recorder demo here, at beginning of video: https://youtube.com/watch?v=90ihiTwJPCc). The only way to achieve this quality otherwise was to be in the studio, and this clearly wasn't possible.

("Wearing a wire" refers to wire recorders.)

After WWI, Bing Crosby, with support through military and government intelligence, was instrumental in developing US magnetic audio and data tape technology, through AMPEX and 3M.

https://web.archive.org/web/20070929110934/https://www.ameri...

https://web.archive.org/web/20080821140025/http://history.sa...

(There is a further AMPEX-CIA connection through Larry Ellison and Oracle: https://en.wikipedia.org/wiki/Larry_Ellison)

It was German use of mass media -- though in WWI-- that turned the meaning of 'propaganda" from literally a holy undertaking (the propagation of faith by the Roman Catholic Church) to its present pejorative sense. WWII Nazis capitalised heavily on and greatly extended earlier practices.

Tactical use of radio communications also playe a decisive role in war -- the key differentiator between Grman and French armour in the Battle of France was that German tanks all had radios, and could respond to developing circumstances. French tankers could only play out prescribed batle plans, or act independently and uncoordinated with all other units.

There is actually a long history of the disruptive (and often highly harmful) effects of new and especially mass media, and numerous historical inflection points can be traced to revolutions in information and communications technologies: moveable type and the Thirty Years War, vast advances in printing technology and literacy and the revolutions of 1789-1914, and later ("the long 19th century" https://en.wikipedia.org/wiki/Long_nineteenth_century), yellow journalism and the Spanish-American War, WWI, tje Russian Revolution, WWII, the Chinese Revolution, Father Coughlan, Jim Crow, Civil Rights, the Vietnam War ant ant-war movements, the rise of hard-right talk radio and cable television, and lately, social and mobile Internet.

Today's Nazis and KKK are using the Internet. It's the cheap, high-fidelity, visceral-imact mass medium of the age.


maybe this is a naive view, but imo the ability to find people "like you" is a neutral thing. it can be very good, very bad, or somewhere in between depending on your definition of "like you". I certainly don't miss the times when I was the only person I knew who thought computers were cool.


> the same ease also exists for hate groups and those seeking to cause harm

Which are the only ones you will find if you are looking for something negative. There is a downside to almost everything, so what would you suggest? Force everyone into the same group or allow them to choose?

I don't think this question is hard to answer.


No, the article feels like it's not communicating the reason that this is potentially important very well. If I'm reading this right, the whole opening takeaway about the Atlantic ocean shrinking doesn't seem like the point here.

From what I gather in TFA, we haven't figured out how subduction zones start, and we're currently observing the beginning of one in progress, which is giving us the data to back up earlier theories for the first time. This fills an important gap in our understanding of plate tectonics.


I think this is an important point. The fact that some countries have started to impose regulation against some of the tactics these gaming companies use (like Belgium banning loot boxes[0]) suggests that this is starting to be recognized.

I'm a big fan of video games, but games that are essentially thinly-veiled attempts to get people addicted and extract money make me queasy.

[0]https://www.bbc.com/news/technology-43906306


On a side note, I find it extremely interesting that that same law you mention explicitly sidesteps an even older form of "child gambling" in the form of trading and collectible card games.


Yeah agreed. As I've gotten older, my tolerance for putting up with experiences and tactics I don't like has decreased. I dislike Epic attempting to strong-arm me into using their platform while still dealing with ongoing security concerns and adopting anti-consumer behavior, so I won't use them. Just fine to wait and play some of the many other games on my eventual to-play list


Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: