dankent
Joined 9 years ago
Joined 9 years ago
https://dreamsofgerontius.com/2016/10/05/masquerade-by-kit-w...
A starting point might be to use battle-tested open source systems but subject them to detailed in-house analysis and audit.
It's possible that paranoia might lead to criminals avoiding even technology that they could be using safely, further slowing them down.
An old fashioned system also seems like it would require more people, opening up more opportunities for human intelligence operations targeting the network.
That way they can pay for the good service they provide without needing advertisers.
For example, the author of the memo presents some citations to back up the idea that there are biological differences between men and women that might explain why more men than women choose to work in tech. I don't find that idea controversial.
However, none of the citations provide any evidence that the degree of biological difference between the male and female population is sufficient to explain the relative gender balance we see in tech.
I don't need to be an expert to notice the lack of evidence for that part of the argument and conclude that the argument is poorly made.
It is possible that such evidence does exist and I would be interested to see it but that would not change that fact that this memo, with its cited evidence, failed to make that case.
Providing a lot of flexibility to the client when querying the server eliminates a lot of server side work that would normally be required in order to implement new user stories.
It does require a bit of a mindset change so I am often having to force myself to try doing things in a different way to my first assumption.
This is similar to what I would have to do server side if I were using SQL to get the data and then processing it to return a tree in JSON.
If I know how deep the tree will be (and it is only two or three levels) I query it directly with graphql
I thought some of his arguments were very weak and, even where he had decent points, he did not make his case in a compelling way. However, I don't think he should have been disciplined and certainly not fired. Those who disagree should refute his arguments.
As a scientist, though, I'm always going to wonder whether there is a way to subject it to a proper test rather than just relying on opinion (no matter how much I respect those opinions)
Note, though, that you are using the specific word 'algorithm', where as I am talking about 'methods'. Most cryptographic failures are in how the algorithms are implemented or applied, not a problem in the underlying maths.
I would not be nearly so confident about a similar bet that applied to the actual code being widely used for encryption.