a thoughtful web.
Good ideas and conversation. No ads, no tracking.   Login or Take a Tour!
comment

    I'm mostly with you on this, @veen.

Are you though? If I understand you correctly, you argue that users should take responsibility for their own security because services can't be trusted to do this for you. Defensive security doesn't work when you outsource it, so you have to take responsibility for your own security.

In the abstract I think I agree, but I don't think that principle holds up in practical situations. You make the assertion that users can choose these services, when the reality is that they don't know they are part of a service, are forced into a service, have to choose the lesser of evils or aren't aware of their data being shared.

You're not putting agency into the equation here. So as soon as you get to practical situations like Equifax and IRS breaches, I don't think it's fair to say to the users "stop crying, you fool, you should've been responsible for your security." Because those users usually can't do that. Take email for example:

    It is YOU washing your hands of the responsibility for doing software updates, defragging your hard disks, updating your RAM, managing server loads, etc., and "paying" someone else to do it for you.

Are you really suggesting that people should run and configure their own email server just to be able to communicate? To take your argument to its logical extreme, should they also run their own internet cables then, because that would be more secure? Should they build their own ISP to prevent their internet from being tapped? Should I run my own NSA instead of paying for the current service through taxes?

    The user of the data has abdicated responsibility for the data to a disinterested third party.

Offloading difficult tasks and abdicating responsibility to a third party is how society works. I don't know how to run a bank myself, so I pay a bank a fee under the very reasonable expectation that they protect my data. I don't know how to protect myself against foreign enemies, so I offload that task to the government through taxes under the expectation that they protect me.

Your 'radical new thinking' sounds an awful lot like libertarianism to me.