December 2023
23 tweets
I've been talking with a bunch of people (and am one myself) who all have a particular set of skills but whose job titles are all over the place. I think that set of skills and the need for this position aren't random — but it needs a name. berjon.com/chimeralogist/
♥ 27↺ 8
Thank you Lilian! Happy to meet any of those folks, of course :)
♥ 1
Hahaha, yeah, it's definitely true that infosec people often need to be this. You have to understand people and organisational structures if you're going to have an impact.
I've heard "unicorn" on than one occasion indeed.
♥ 1
That would be a marvellous thing. Not sure if I should apply to lecture or to read :-D
And @chadkoh !
♥ 1
I don't know how active he is on here, I'm not normally around, only saw the notification. I can't seem to find you on the blue sky?
If we're mutuals or we know each other, I have invites to the blue place — DM and I'll share!
♥ 6↺ 1
Specifically design (which is tricky since the ecosystem must have agency) or more generally design in support of ecosystem creation (wilding/rewilding)?
Yes, that's why I mention rewilding. Folks there are thinking in terms of big functional contributions to ecosystems such that the rest of the details sort themselves out. (bookshop.org/p/books/rewild… is a good intro if you're interested.)
♥ 1
And so, they see it as a bad idea to try to do conservation with exactly the right species, as if nature were some kind of static system. Need big herbivores in the Amazon basin but giant sloths are extinct? Hippos might work!
♥ 1
A lot of the thinking that I know about in this space is about what *not* to do (e.g. jstor.org/stable/pdf/262…). Which is fair because we've got it wrong a lot, but it also doesn't address the question of how to do that constructively (and for society).
♥ 1
The closest I've found to a positive description (but it doesn't give you a blueprint) is in the resilience space: cambridge.org/us/universityp….
I'm working on a book in a very similar area (in tech/society). I'd be delighted to talk more if you're interested!
♥ 1
I hear there's been some downtime on here? Anyway, I have invites for the blue side if you're looking.
♥ 3↺ 1
I'm so sorry to hear that, sending lots of love your way.
♥ 1
GPC is on it and that's good.
♥ 2
The GPC project? Of course!
♥ 1
Any bona fide implementation of the spec ought to count as an authorised implementation. The spec has all the necessary conformance criteria, we can throw in a test suite to make it provable but it's a very easy spec to implement.
♥ 2
Yeah, that was the IAB's attempted position when the CCPA came out: that you would need proof that the subject had accepted GDPR levels of consent to opt out. I, uh, good luck to whomever wants to try that in court I guess.
♥ 4
You mean in terms of notices? That should be dealt with regulation of the user agent.
♥ 2↺ 1
What kind of intermediary, are you thinking about a proxy?
Notices and defaults are pretty easy to address on the browser side, so I'm not sure who would want to look for trouble there, I just don't see the winning strategy except perhaps minor delay?
♥ 1↺ 1
They'll only be addressed if it's mandated. The browser behaviour that best matches users' expectations is 1) sending GPC 2) by default 3) without asking. Any departure from that ought to only happen when there is a need to make the lawyers happy.
♥ 2↺ 1
Of course, but the fact remains that browsers should design as much as possible to align with user expectations. So far the implementations I've looked at align well with the laws I'm familiar with.
♥ 1↺ 1
