• 5 Posts
  • 26 Comments
Joined 3 years ago
cake
Cake day: March 12th, 2024

help-circle
  • I don’t use nor need screentime control.

    It depends on what your goal is.

    I see them as very useful when you want to reduce distractions and unwanted habits. Block specific apps during work hours or in the evening.

    For parenting, a simple time limit may be enough, or time ranges may be desirable and reasonable or required.

    The things I may prefer to be without I see largely as coping mechanisms. Generally, I can commit to not do stuff, I think. Before forced control, adding barriers to access can be the first barrier to add.



  • In a work business context, the company provides and owns the devices, and for security it needs to monitor not individual person behavior but threat indication and traceability. Network traffic should be routed through a company router to restrict and monitor which device and account talks to which systems and services and to monitor indications of breach.

    The logging data must not be endlessly persistend for space usage reduction, data minimization, and eventual privacy. There must not be direct unauthorized access but access must be restricted and reasons must be documented.

    When the devices are company owned and the usage announced to shall be only company activities not private activities, the privacy implications are low. If individuals specific behaviors are not monitored but only their broader activities across edges with security relevance and if that information is not accessed without reason, then it’s not a significant private issue but on the other hand remains security relevant anyway.

    DNS and network filtering makes sense from a security perspective. If the company can assume only work related tasks are being done they can make reasonable guesses which services or countries will be accessed or internal services may be accessed from.


    Parental controls make sense and change with age, parental education, and personality and trustworthiness.

    I’m not sure how useful monitoring would be beyond basic indications.


    What I would like to have for my own system; I would like to control and monitor which programs can see, read or write which files, services, and network targets. I do use some stuff in that area, but I would like a more obvious, convenient, and secure framework/suite. To protect myself from bad programs (which may not be “bad” initially and for a while). Zero trust means apps should run in minimum environments and access, not inherit the whole user session context and user accessible storage.




















  • 21.3 percent disable automatic emergency braking outright

    For HGVs and buses, the law changed to prevent drivers from deactivating them so they can driver closer to the vehicle in front.

    Those changes were raised after crash inquiries which found some lorry drivers regularly switch off their AEB systems to drive closer to the vehicle in front. The regulation change will limit system deactivation to 15 minutes with automatic re-engagement after 15 minutes. - Wikipedia

    I don’t know about their quality and false-positive rate in cars, and maybe car usage is simply different, but I’m sure automatic emergency braking prevents many accidents.


  • A security advisor at work recommends migrating to SaaS so we don’t have to manage any of the infrastructure. This makes me wonder.

    These topics often get “why is it even connected to the internet” comments. This makes me wonder if they’re buying a “complete system solution” where it’s not an operator decision but a manufacturer decision, and maybe even reasonable in regards to generally being accessible and manageable, with critical systems separated within the whole-bundle system. But often, the necessary safeguards and system separation are not in place anyway. Offloading responsibility doesn’t mean it gets done well, unfortunately.