• 0 Posts
  • 46 Comments
Joined 1 year ago
cake
Cake day: July 15th, 2023

help-circle




  • As others have mentioned, a trusted 3rd party signs the correct key so your browser can check the key itself.

    However, it should also be noted that your browser must have a list of trusted 3rd parties and their certificates used for signing in order to perform this check. It’s entirely possible to modify this list yourself. Some examples include:

    • executing your own MITM style “*attack” in order to intercept and analyze local https traffic
    • corporate network inspection and monitoring, where a gateway does the above for all devices on the network which have a CA cert pre-installed through some policy

    So while it’s possible for trusted 3rd parties to issue valid certificates to bad actors, it’s also possible to add anyone (you, your employer, or some bad actors) to the trusted parties list.



  • That may be, but I’m not sure that’s a problem for a communication platform. I remember one time when they moved the share screen button around and some less tech savvy users thought the feature was removed!

    Teams has something like chat threads too. E.g. you can reply to a message in a channel and it groups all replies, and you can also focus that thread if you want. But I agree it isn’t hidden “off the main topic” quite like slack threads.





  • The argument for AM appears to be: the vast majority of adults will receive an emergency broadcast through their cellphone, but what happens if some event has already occurred which disabled large portions of the cellular network (which itself is an obvious target to create havoc)?

    I’m fine with using AM as a redundant system for alerts.

    Maybe make it more useful though for people in the car? I don’t need an AM button I’m never going to touch. Instead have it monitor whatever the emergency broadcast frequencies are automatically, and put something on screen when there is an alert. That would make it a useful “modern” feature as opposed to appearing as a legacy holdover.










  • The statement from Planned Parenthood includes:

    Despite the Attorney General’s demand that PPSLR turn over all patient medical records related to gender-affirming care, the court ruled that individual patient records remain protected — a major victory for patients’ privacy rights.

    I suspect this means the AG may receive de-identified records including procedure or diagnosis information, but not including any patient identifying information such as patient or billing account, name, address, social, date of birth, date of service, etc.

    It could also include aggregate information about providers and facilities, especially if records are obtained under the guise of a fraud investigation, allowing the AG to target locations and providers where patients frequently obtain specific services. That route might be the most harmful to patients, for ex. if they’re unable to continue receiving care because of harassment of the providers.