arcza

60+ people died and you're making laughs over it. Distasteful and totally crass.

Insane take. This has like 10x the number of failure modes than a proper signalling system with verifiable software design.

SSO is a core security feature, not a value add. I do not mind charging extra for say SCIM or advanced RBAC. I have a different view to business than most SaaS apps, and feel when you bring value and delight to the customer, they take you as a trustworthy partner and want to grow with you. Trust is very important and I feel so bitter paying Bitwarden, Adobe, and all the other enshittified stacks that 30-100% uplift on the base plan to get SSO. I also love my homelab stuff and it's a sour taste when I need to set up some system with local auth. yeah, maybe some nerd's A/B test show charging SSO makes more money, that's a shame and I think long term it's simply harmful (and probably less profitable due to my comment on stickyness and delighting customers being good business sense).

Well this slightly (but only slightly) makes this a little better. So Cory at the Home Depot cannot stalk his ex by tracking the nationwide Flock network, but _in effect_ has a mini nationwide network available to him because he can see any Home Depot/Lowes which is a huge dragnet anyways?

But this sounds like a policing problem not a private enterprise problem. By all means let them have an ALPR reader at the parking lot egress. 'Hi 911 yes we saw this pickup truck XX1ABC steal our shit at 2359hrs this evening', not 'cool we'll play cops & robbers with highly sensitive PII and no accountability or due process'

Yes, this. I wouldn't start by victim blaming over what is a plausible event from recent media coverage of Flock.

Sorry, I did misread that. Stay safe I guess :/ I just find it bizarre this whole thing is a private company with a sales@ email the Home Depot etc can contact. I won't be political but a) unlike many countries you can elect your sheriffs, remind them who they work for, b) you have a thing coming up in a few weeks, remind your lawmakers who they work for too.

That is fucking insane. I'm also separately sorry your friends are being stalked. I'd like to give a perspective here without sounding holy. Yes we have ANPR (what you'd call ALPR). There are national police databases and I am sure the cameras are very effective, but every search would require a justification of proportionality and access is not sold to the highest bidders. I think the furthest stretch of users would be the tax authorities' investigations departments. That a private company can profile citizens' movements like this is insane.

Sorry, ignorant European here. WDYM a Home Depot employee can access Flock? This thing is not restricted to LEO?

Probably the department's fault for not using (presumably) Entra Conditional Access to restrict SSO to corporate devices / corporate subnets.

This is why if you're building a product, please give SSO for free (see sso.tax) - you shift responsibility, requirements and posture to the tenant's IdP.

More annoying trash slop. I stopped reading after the first graphic.

I agree. OP is oddly risk averse to what i would regard as normal conduct of business.

Don't do an on-site either, they might connect to the wifi in the office and guess the password, we can't guarantee they won't guess it and download bad things.

Don't hire in the first place, there is a liability they turn up to work in the wrong mood, we can't guarantee it.

Sorry OP, I stopped reading when I saw it was Substack. I won't subject myself to hostile UX, no matter the content.