Post by @JessTheUnstill@infosec.exchange
More "boring" service providers who are content with a modest profit margin and slow organic growth, please. I don't even care if the UI looks "dated" and new features take a long time to be built. Traditional boring bare metal, only add new customers when you have capacity to support it, whatever.
A company of 50+ year old tech veterans who have been laid off and left behind from age discrimination just looking to keep the bills paid until retirement.
Run it like a co-op, like a little credit union that isn't looking to expand quickly, just serve their little niche of the community.
If it weren't for the fact that I don't know the first damn thing about starting or running a corp, and it'd liquidate my retirement funds to even start buying infrastructure and hiring people...
Also, I'm American, so the fash could just walk up to the door, stick a subpoena in my face, and demand I hand over customer data or go to jail forever.
2 likes
2 boosts
@JessTheUnstill @RealGene @arrjay Hey that's my sign! I would be happy to do email support and small web tweaks and copy editing for this hypothetical enterprise.
@jessamyn @JessTheUnstill @RealGene @arrjay I'll be happy to help with database/OS work on said theoretical enterprise :D
@JessTheUnstill @RealGene @arrjay
There is this 3NWeb, No plain text, No unnecessary metadata given by client to server => leads to Nothing abusable on the server.
It changes some structuring: processes run on user devices. Server has no idea about apps user has, and can't censor.
If you build new tech, build on this foundation.
For use now, there is server, and desktop side, for fdroid, builds can be found in https://gitlab.com/fdroid/fdroiddata/-/merge_requests/51730
with text/links
@JessTheUnstill @RealGene @arrjay
Perfectly describes AI, once they raise the AI flag, the canary is dead, run!
@RealGene @arrjay @JessTheUnstill Is it even clear yet that warrant canaries are legally functional, and not just an extra line-item on warrants?
@patrick @arrjay @JessTheUnstill
A canary doesn't have to be "legally" anything.
It's a warning that doesn't violate the letter of the double-secret probation.
@RealGene @arrjay @JessTheUnstill I haven't seen a National Security Letter, so I don't know if it merely says not to tell about it, or not to communicate about it.
@RealGene @arrjay @JessTheUnstill Yes. One paragraph covers folks in IT security who doubt that a canary works.
The next paragraph covers three decisions by the SCOTUS are brought up as argument that it would work, trailed by a very trust inducing "citation needed".
Of those, one is more concerned with the question if the government may forbid speaking (or writing as the case may be) about government material, and apparently there are ways to established enforced enlistment in gov't secrecy, as long as they're by law.
The other two aren't about gag orders at all.
Citation needed, indeed.
@JessTheUnstill @patrick @arrjay
…in which case, it doesn't really matter if you disclose the letter, because either way, you're getting renditioned or sent to federal pound-you-in-the-ass prison.
@JessTheUnstill Even still, there are benefits to working with a company that the fash have to ask if they want info, rather than a company that is actively providing that info...
@Epic_Null @JessTheUnstill Not as ideal as a company that *can* deny the fash the info without going to jail, because they're technically in a non-fash country.
@AT1ST @JessTheUnstill Yeah... but you gotta work up to a non-fash country. A good portion of how we got here was a total market control over certain industries by a handful of companies. Breaking out of that would go a long way towards re-establishing ourselves.
@JessTheUnstill Hard to give data you never collected in the first place. Remember that time Signal was ordered to give all their data on a specific user and they gave them everything, which was their name (already known to the state), their phone number (trivial for them to check as well anyway), and the date the account was created, that's it. They complied with the law without violating customer privacy.
If the law changes to require companies to collect user data, that's a different story, and I think that heavily depends on what kind of service we're talking about.
@JessTheUnstill this part is one of the reasons why smol centralized hosts won't take off at large scale, and why we need full p2p instead
@JessTheUnstill @cynicalsecurity I ask because I already run my own consulting Sàrl (LLC) so I know how to run a company.
In Switzerland but that's not a magic bullet.
Pragmatically speaking there are a bunch of email providers already, although I can guess the proximate cause of this.
I run my own email and so does Mr Cynical. I'm not 50+ but I'd like something like this to exist for when I am.
@JessTheUnstill yeah pretty much the problem, and also assume that the more someone gives to a project the more control they want in it.
there is a lot to make it something worthwhile and not just a drain. would love to be a part of something like that but in terms of my own abilities, i don't think i would do myself or someone else any favors by running such a place.
@JessTheUnstill no, yeah, if we were in the same city and had the capital we'd start this with you. we've been closely involved with starting things enough times to have gotten the idea.