nickmyersdt
Joined 5 years ago
Joined 5 years ago
If you build a system explicitly designed to have no content boundaries, and it produces CSAM, that's not a failure of execution - that's the system working as designed. You don't get credit for noble intentions when the outcome was entirely foreseeable.
Deciding to place no limits on what an AI will generate is itself a value judgment. It's choosing to enable every possible use, including the worst ones. That's not principled neutrality; it's moral abdication dressed up as libertarianism.
The SAML Federation one is where all the modern SaaS fall short. Its still SAML but it involves:
All the metadata for 100s of IDPs being downloaded and made available to enable
Publishing the SP metadata to the federation(s) which may involve fees.
Specific rules around metadata (attributes) being released and adhered to.
And if your directory insists on having an email addresses for a user, that might be an issue.
There's a reason why Higher Education businesses have cropped up around doing SAML Federation.
I have had a trial of FusionAuth, and it was great, just didn't solve enough of our pain points to justify a migration.
If it would:
a.) Perform group assignment based on SAML attributes (like Okta's group rules), and, b.) "natively" support SAML Federations used in the Higher Education space (which Shibboleth appears to be the only thing that supports)
I'd sign up tomorrow and start migration of my 150k users.
Multi-tenant (each of my customers gets a fully separate directory, with access to all tenants for our admins)
SAML and OAuth (customers can set up SAML themselves via the SaaS interface, or we set the SP up for them)
Rule based group assignment based on SAML attribute evaluation (e.g. assign users to this group if the attribute X = Y)
APIs to manage users, groups, organisations (tenants)
We've built something using Okta, but all our customer users are in one Directory/Tenant.
Auth0 nearly gets there with Organisations but can't help with the sub-groups and rule based management.
For context, we have an education product and customers are districts or schools, and the sub-groups are typically schools and/or classes or groups of users (e.g. seniors or juniors).
We also need to support SAML Federations like InCommon, OpenAthens, UK Access Management Federation which makes the challenge harder (these federations want a single SP to which many IDPs authenticate) for Universities. None of the modern platforms support this.
If anyone has found an out of the box solution for this, I'd love to hear about it.
Not a single app, but works for me (so far).
It fails (and therefore is loathed) when the people who need time, focus, room, safety to achieve the outcomes are forced into working with particular processes, procedures or tools in order to satisfy someone other than the team or the customer.
You'll want to use an uncompressed and unencrypted format. You might want multiple formats, in multiple places.
Likely one of these will be network attached storage with RAID, however it's been 10 years since I did anything like this so things may have moved on.
You may also want to think about ensuring you have players that can play the formats.
IIRC Blu-ray discs are expected to be OK for 15-30 years, however I don't know enough to say whether this is specific to certain manufacturers or usage.
From my limited knowledge, most content is still released on disc, however with the move towards streaming, I can foresee this may diminish over time. IIRC the Blu-ray market (both releases and players) is shrinking year-on-year.
I too have encountered an immense amount of frustration due to content rights being sold to a single provider, who is not one of the three or four we already subscribe to.
Non-consensual intimate imagery harms real people.
CSAM normalizes and facilitates abuse of real children.
Grok, and everyone involved in it or similar endeavours, facilitate abuse.