Conversation

Notices

1. Strypey (strypey@mastodon.nzoss.nz)'s status on Friday, 18-Jan-2019 04:04:43 EST Strypey

   I'm envisioning a user education project that masquerades as a new #SiliconValley startup, with a website and mobile apps. It would implement every design #antipattern used by typical startups, like asking for access to contact lists on other services to help users "find your friends", asking for every permission available on a mobile during install etc. But instead of exploiting these, it would email the user, explaining all the ways the information they gave could have been used to do so.

   1. Strypey (strypey@mastodon.nzoss.nz)'s status on Friday, 18-Jan-2019 04:08:54 EST Strypey

      in reply to

      Obviously to work, it would have to be a bit sneaky. So to avoid suspicion of being actually exploitative (instead of simulating it for educational purposes), the project could work with user rights groups like the #FSF and #EFF behind the scenes, and allow both its code and servers to be audited by people from those orgs before going live.