@dymaxion thank you!

@dymaxion oh wow. that is super cool and well done. do you have a source we can point people to for it?

@erincandescent @azonenberg @aeva @ShadSterling not gonna lie, that list of AWS a-la-carte products gets longer every time we look at it. it's been quite a while since the last time we decided we wanted to know what every single one was.

@azonenberg @ShadSterling @aeva @erincandescent yes, privacy-brain can be very cynical sometimes, can't it

@azonenberg @ShadSterling @aeva @erincandescent also, they offer email service on the sending end, which does mean they end up with most of the same data passing through their systems, since they're a very popular cloud provider

@aeva @erincandescent @CliftonR a lot of people have given up on flagging spam

@erincandescent some of it may also just be that younger people haven't lived in a world where cool things happen on email, at least not to the same extent, so there hasn't been a chance to see the nice things about the venue

@erincandescent yeah we'd like to understand that better as well

we do think that a lot of it is about it implying a higher level of commitment to the project, and a disclosure of more, harder-to-change contact information... that's as compared to using a workflow based on an extremely popular code forge with which the person already has an account

@aud adorable!

@kouhai we second the doubtless many people who, by the time we finish writing this, will have weighed in to say "don't". that way lies only sorrow.

if you choose to disregard this advice, we use Authelia pointed at LLDAP.

don't learn too much ldap semantics or you may start wanting openldap instead. you've been warned.

@aud @trochee @lina @hipsterelectron we're always super happy to review people's design docs

@aud it is super easy to not think about that! especially if the discussion started in the digital domain

@aud for sure!!!!

@aud yes, when financial cost and environmental destruction are not concerns, it's a good approach heh.

@aud of course, we never really believe a technology works until we actually try it, and for obvious reasons we haven't tried this one.

@aud the way they've bragged about it in the business press makes it sound like it's mostly a software solution, yeah.

@aud we kind of don't quite believe that anyone's actually figured out how to run a bunch of dust through an electron microscope and get good three-dimensional models of each particle. like. the mechanics of actually putting an object on a microscope stage are quite hard. so we're pretty sure this is just a case of militaries deciding they need to defend against absurd things that aren't going to happen. just... only pretty sure.

@aud right???? it's like the un-shredding of paper problem, but on hard mode

(un-shredding paper is solved, and commercially available for a few thousand dollars per page. good fun.)

@aud you mentioned tombstones. tombstones are an important strategy in general, and we have definitely specced things out in the course of our privacy work that rely on them. they can be quite helpful in scenarios where there's a need to redact things but the metadata that the thing existed should be kept. of course, they require the specific application-layer code to be aware of how deletion works and have specific support for it.

@aud and yes, overwrites aren't real since SSDs came along, because the drive is permitted to remap blocks to other blocks any time it likes. also, it often does so without even telling the higher levels about it.