• 0 Posts
  • 434 Comments
Joined 6 months ago
cake
Cake day: January 3rd, 2024

help-circle
  • I would love to see the certificate authority model become less and less important.

    “Can you write a small check to an organization we are all pretty sure isn’t outright malicious?”

    Is a surprisingly good pragmatic protection against malicious SSL certificates, I will admit.

    But there’s significant flaws with the approach - notably power dynamics and creation of large scary targets for bad actors.

    I would love to see CA acceptance move from PASS/FAIL to a dynamic risk score, that is based on my own browsing behavior (calculated solely within my browser).

    If I spend 90% of my time browsing domains at example(dot)mycorporation(dot)com, there’s a great chance that anything new signed by the same authorities can be automatically trusted.

    It would still puts a lot of power in the hands of Amazon and Google, but would reduce that power in scale to the amount of services they’re actually providing to each user.





  • I’ll take “Organizations that made it to the top by doing something different, only to fall under leadership that doesn’t understand what made them successful and descend into ruins” for 200, Alex.

    Seriously, Jeopardy team - this is a rich category:

    • Netflix advertisements.
    • Zoom mandates staff return to offices.
    • Microsoft forgets what the “P” in “PC” stands for.
    • Toys R Us implements a shitty holiday gift returns policy.
    • Sears decides to sacrifice reputation for quarterly stock price gains.
    • Walgreens decides bottom-of-the-barrel incompetent pharmacists can uphold their “get it all done in one visit” secret sauce.
    • Radio Shack decides that once-every-two-years cellphone contract sales are the future for holding passionate electronics hobbyists’ loyalty.

  • I’ve not worked with a marketing team where that would work, but maybe it will for some.

    I’ve never been anywhere that I thought it would work, but it ultimately did, almost everywhere.

    I’ve found it takes a few iterations, but the marketing folks in on it love being the ones who actually can reliably deliver on their promises.

    It doesn’t work for the marketers that promise whatever they please without talking to dev, but I don’t find them to be worthwhile professional allies, so I don’t sweat it.

    It doesn’t change the “massive customer will only renew if” scenario, though.

    Very true. It doesn’t help with that case, and that one does happen. I’ve had the best luck saying “we don’t do that, but we’re scrambling to add it” in that situation.




  • We’re in a “fuck around” cycle where they pretend that the problem was we didn’t have “copilot”, and not that all of our development managers are wildly unqualified.

    The “find out” part comes next.

    Which is fucking impossible to fathom, because my fucking grocery store’s app can’t even implement search reliably, today.

    I’m not sure how they’re going to manage to make things worse.

    Actually, I’ll make a guess. My guess is we will go under the critical skill level needed for building safe hospital equipment, and we will get a rash of that stuff killing people due to lack of programmer skills.

    I hope the asshole CEOs are the ones that die, but there’s not enough karma in the world for that.


  • I went back to Windows several times before I made the switch permanently to Linux. You just gotta do what works for you.

    This is the way.

    I went back and forth for years. Tuning and tweaking to find what works for me. Spoiler - the fully open source options are what worked best for me, eventually.

    For awhile gaming was the only place I put up with non-Linux anymore. And now with my SteamDeck, I have an easy way to avoid buying games that aren’t Linux ready.