Although I don't totally oppose judging people because of their views (shaming has been and can be a very useful for improving societies), I wonder if software written by such people should be. Seems to me that we don't have the abundance of software yet that would allow doing that.
Especially I'm wary of judging people for being dumb in applications like Twitter that use dark patterns to entice them into being dumb. In some way it feels to me like punching down, like blaming the victim.
Are you asking if I insist that the minds behind my secure private chat have some moral standing and common sense? One would hope so. I wouldn't trust encryption made by anti-vaxer more than I would trust a plane put tougher by flat-earther. I don't want to be the hero of the next leopard eat my face song.
My understanding of encryption is that the point is that you don't have to trust the people doing it. You just have to trust the security research community that proved that the algorithms/protocols work. Or if you're a hardcore security guy yourself, you can review it yourself.
Also, my understanding of people is that what they seem like is no evidence for what kind of people they really are.
It's a tricky line. On one hand, I agree that you don't need to trust the person—just the code and the cryptographic model. But at the same time, if the dev is actively pushing misinformation or has a history of hostility toward marginalized groups, it erodes my confidence in their ethical choices about security and privacy. Trust isn’t just technical.
Although I don't totally oppose judging people because of their views (shaming has been and can be a very useful for improving societies), I wonder if software written by such people should be. Seems to me that we don't have the abundance of software yet that would allow doing that.
Especially I'm wary of judging people for being dumb in applications like Twitter that use dark patterns to entice them into being dumb. In some way it feels to me like punching down, like blaming the victim.
Are you asking if I insist that the minds behind my secure private chat have some moral standing and common sense? One would hope so. I wouldn't trust encryption made by anti-vaxer more than I would trust a plane put tougher by flat-earther. I don't want to be the hero of the next leopard eat my face song.
My understanding of encryption is that the point is that you don't have to trust the people doing it. You just have to trust the security research community that proved that the algorithms/protocols work. Or if you're a hardcore security guy yourself, you can review it yourself.
Also, my understanding of people is that what they seem like is no evidence for what kind of people they really are.
It's a tricky line. On one hand, I agree that you don't need to trust the person—just the code and the cryptographic model. But at the same time, if the dev is actively pushing misinformation or has a history of hostility toward marginalized groups, it erodes my confidence in their ethical choices about security and privacy. Trust isn’t just technical.