You are right. This is the least I can do.
Thanks for the words of encouragement.
bergetfew
joined 1 year ago
☹️
I hate that you are right. I really wanted to do something to make a difference, but it's saddening to see no one batting an eye to this.
Even if we get people to shift to privacy respecting or encrypted apps, the problem still stands. They could just ask you to give access to those services. If you don't, it would come with its own legal challenges.
Section 247(1)(ii)–(iii) mandates individuals and businesses to disclose passwords or encryption keys and permits officers to “override the access control” of any device or account. If you don’t hand over your phone passcode or email password on demand, officials can hack into the device. Any refusal is now explicitly punishable as non-compliance.
End-to-end encrypted messaging services like WhatsApp or Signal could be forced open during a tax raid.
Solving the issue would need to come from challenging the act itself.
I've been using your application for my services for almost a month now, though I just have one redirect link at the moment. I just forgot about it after the setup, although you could consider it to be a sign of a good product?
I wish if there could be additional analytics or logs for the links like a timeline, unique + existing visitors etc, however I completely understand if they cannot be implemented for the sake of keeping the app simple. Thanks for your service regardless!
Absolutely lovely animation. This just made my day. Thank you kind stranger.
Thank you for your suggestions. From the thread it is highly apparent that I would need IT's support on this.
As for the hardware, we could still consider a machine with Linux as the server instead. Though the remote access issue would need to be resolved.
Honestly, after considering the security implications of enabling access to the university's network, I think I would first warn the team about this before setting up anything and let them decide how to proceed afterwards. I'll also inform them to ask the IT department for the in-house VPN solution and identity management.
I don't believe there would be need for the team to access anything in the network apart from the computer itself. Is it possible to arrange a solution that disables connections to intranet devices through the server by default just to be safe?
I wasn't able to get a clear response but I can say that they are primarily going to use it for writing and storing code like a Github repo, plus installation of 2-3 programs whose names I couldn't recognise.
They could use Github itself, but I know they know this too so but deliberate chose to work this way. I could probably suggest a software like Gitea or Forgejo for this purpose, but I suppose they aren't in need of that.
Mostly it boils down to laziness. They for sure have the ability to set up the server themselves but they can't be bothered to unless it's for a larger number of machines. They have essentially given a thumbs up to proceed with the setup but haven't offered assistance themselves. I think the team might already have reached out to them, but were let down which is why they tried to contact me.
The server will be stored in the personal office of one of the members of the team. It should be physically secure.
I don't think I would completely lose access to it, rather it's just that I won't be allowed to personally SSH to the server with my own devices. I may still be able to connect to it through one of the members' devices or onsite. The team member earlier mentioned will take care of the system after the setup.
I don't know what'll happen to the server after the project is over, nor am I in a position to assume something.
They already have gotten the permission for this.
However the IT department wouldn't be helping with enabling public access to the computer via the university's intranet. So it is up to me to figure out an alternative connection strategy like tunneling or VPN.
I was proposed to set up the server knowing that I have limited knowledge on managing stuff like this. They already have an sysadmin in the campus, but I think their setup is simple enough that they were willing to approach me. Besides I do consider myself to be experienced enough to work my way around CLI and troubleshoot issues even if I haven't had experience with hardware like this.
I don't think negotiating for a different computer would be possible. The main challenge would be to make best of the hardware I'm provided, with additional peripherals if needed.
I do plan on asking them the nature of the work to be done on the server, but I wouldn't expect it to be too niche or computationally intensive since they have separate computers for that. In any case, I will relay the points highlighted in this thread to them and get a clear idea of what is needed to be arranged.
view more: next ›
I have to go to work, but posting this is more important