• 0 Posts
  • 110 Comments
Joined 2 years ago
cake
Cake day: September 26th, 2023

help-circle




  • ____@infosec.pubtopolitics @lemmy.world*Permanently Deleted*
    link
    fedilink
    arrow-up
    17
    arrow-down
    1
    ·
    8 months ago
    • this is terrifying.
    • This does not sound legally permissible, see posse comitatus.
    • Members of the military have an obligation to refuse illegal orders. I am neither in the military nor a lawyer, so I can’t go too deep on that.

    Even if we see (likely) “act first, let it wind through the courts later,” I’d expect there to be a substantial number of refusals.










  • It’s already trivial to get local banking details from many countries, (e.g., ‘multi-currency’ debit cards) but as far as I’m aware there’s not a practical way to get a foreign debit card without the usual hoops that the full account would require.

    Probably because demand for such a thing is low - I can generate disposable card numbers on the fly, but only from my home country. Can’t imagine (aside from this specific edge case in question) generating foreign card numbers would be all that useful most of the time.

    End-user support for such a thing would also be a challenge - I’m very accustomed to entering the usual data points with my card, but users would forget the associated postal code, or any number of other things, and then call support whining that it’s ‘broken’.





  • In green fields projects, this makes a fair bit of sense at initial reading, tentatively.

    But new code becomes old code, and then builds on the quality / discipline / cowboy status of the last person to touch the code, in a complex and interlocking way.

    I can’t say I’d be excited to find a partially converted existing codebase of this. But in fairness, I’m on my couch on a Sunday and haven’t actually worked through your examples (or read the original paper). I see the benefit to having both types of extensibility, obviously. Just not sure it outweighs the real world risk once actual humans start getting involved.

    I don’t know a single person who can’t say they’ve never taken a single “good enough” shortcut at work, ever, and it seems this only works (efficiently) if it’s properly and fully implemented.