December 2023

23 tweets

I've been talking with a bunch of people (and am one myself) who all have a particular set of skills but whose job titles are all over the place. I think that set of skills and the need for this position aren't random — but it needs a name. berjon.com/chimeralogist/
↺ 8

Replying to @lilianedwards and @peterkwells

Thank you Lilian! Happy to meet any of those folks, of course :)

Replying to @vickyjo

Hahaha, yeah, it's definitely true that infosec people often need to be this. You have to understand people and organisational structures if you're going to have an impact. I've heard "unicorn" on than one occasion indeed.

Replying to @lilianedwards and @peterkwells

That would be a marvellous thing. Not sure if I should apply to lecture or to read :-D

Replying to @PryvitKyle

And @chadkoh !

Replying to @PryvitKyle and @chadkoh

I don't know how active he is on here, I'm not normally around, only saw the notification. I can't seem to find you on the blue sky?

Replying to @PryvitKyle and @chadkoh

Like, really not very active?
If we're mutuals or we know each other, I have invites to the blue place — DM and I'll share!
↺ 1

Replying to @mattecapu

Specifically design (which is tricky since the ecosystem must have agency) or more generally design in support of ecosystem creation (wilding/rewilding)?
And so, they see it as a bad idea to try to do conservation with exactly the right species, as if nature were some kind of static system. Need big herbivores in the Amazon basin but giant sloths are extinct? Hippos might work!

Thread of 4 tweets

I hear there's been some downtime on here? Anyway, I have invites for the blue side if you're looking.
↺ 1

Replying to @hackylawyER

I'm so sorry to hear that, sending lots of love your way.

Replying to @montezumachavez and @keir_lamont, @Chronotope

GPC is on it and that's good.

Replying to @montezumachavez and @keir_lamont, @Chronotope

The GPC project? Of course!

Replying to @montezumachavez and @keir_lamont, @Chronotope

Any bona fide implementation of the spec ought to count as an authorised implementation. The spec has all the necessary conformance criteria, we can throw in a test suite to make it provable but it's a very easy spec to implement.

Replying to @montezumachavez and @keir_lamont, @Chronotope

Yeah, that was the IAB's attempted position when the CCPA came out: that you would need proof that the subject had accepted GDPR levels of consent to opt out. I, uh, good luck to whomever wants to try that in court I guess.

Replying to @keir_lamont and @montezumachavez, @Chronotope

You mean in terms of notices? That should be dealt with regulation of the user agent.
↺ 1

Replying to @keir_lamont and @montezumachavez, @Chronotope

What kind of intermediary, are you thinking about a proxy? Notices and defaults are pretty easy to address on the browser side, so I'm not sure who would want to look for trouble there, I just don't see the winning strategy except perhaps minor delay?
↺ 1

Replying to @keir_lamont and @montezumachavez, @Chronotope

They'll only be addressed if it's mandated. The browser behaviour that best matches users' expectations is 1) sending GPC 2) by default 3) without asking. Any departure from that ought to only happen when there is a need to make the lawyers happy.
↺ 1

Replying to @keir_lamont and @montezumachavez, @Chronotope

Of course, but the fact remains that browsers should design as much as possible to align with user expectations. So far the implementations I've looked at align well with the laws I'm familiar with.
↺ 1