kitchenkarma

You are unable to tell whether any service uses E2E. It is best to assume we don't have E2E services and adjust own opsec accordingly.

Assume these services are being tapped. If you want ultimate privacy exchange keys with your contacts offline and you PGP over any messaging service.

But but Microsoft is goood! Look GitHub! Linux! Open Souwce! I only use Windows because software I need doesn't work on Linux.

Can someone explain to me what is so special in those photos? These look like snapped on the phone...

It's a bit naive thinking that employees would store their electronics in the lockers. Even if you have spot searches (including cavity search) it still doesn't exclude rogue employee just "forgetting" to store his or hers camera in the locker.

Do they go through phased entry system. For example phase 1 metal detector arch and a 3d scanner like in the airport. Phase 2 strip naked for body and cavity search and then phase 3 - wear company uniform with attached camera and microphones? If not then I can't see how they couldn't take a pendrive in.

This is the future of electronic money. Companies will decide for you what you can or cannot buy.

Shouldn't you also show intermediate page with a privacy warning and a cancel / continue buttons? Otherwise user can click it by mistake and compromise his data.

Move fast break things kind of doesn't work well with planes.

Also too big to fail (fall) doesn't apply here.

Typically CS degree means that you can finish something regardless if it makes sense or not. That skill is in demand in large corporations that require people to follow stupid processes and complete tasks that don't reflect on what are the actual needs. Of course there are good CS degrees, but these are not as common as one thinks. The purpose of universities was to gather knowledge and pass it on where it was not possible otherwise to do so. These days people have open access to all kind of knowledge and universities are not as much important as they were. If company lists CS degree as a job requirement, that for me is a good indication of a place I don't want to work in.

It doesn't matter if it is an IP or another identifier e.g. a hash. Person can be identified by behaviour and this is not anonymised.

You are conflating identification of a person by behaviour analysis with matching an ID. What is the ID is irrelevant here - may as well be a hash. That just proves my point that this project is not compliant.

I don't believe you have understanding what personal data and GDPR is. You are capturing user behaviour and that is very personal regardless if it is "anonymised" or not - and that is without clear need for doing that. That is pretty much against GDPR.

This is very weak reasoning, because you cannot identify an individual by IP either. This project looks like trying to exploit loopholes. The idea behind GDPR is to make sure companies log only data they need. This project looks into logging the data but without expressing why this is even necessary. Therefore I don't think this is compliant with GDPR.

Every generation has problems like this. I remember my friend become addicted to calling premium phone numbers when when he was a teenager. When his parents went to work, he would have stayed home and just keep calling all day instead of going to school. Only when the bill came through post his parents went mad and started to blame everyone but themselves. Eventually they got premium numbers blocked, but his son was spending all the money he could get his hands on on call cards. It was a phase for him, he stopped doing that after few months. When he talked about it years later, he couldn't believe that he did this. He says he wishes his parents gave him more attention and explained to him what it is about and why it makes no sense to do something like this. Fascist love such stories, because they can use them to tell people how they should live and create more regulations.