• 0 Posts
  • 60 Comments
Joined 1 year ago
cake
Cake day: July 23rd, 2023

help-circle




  • I didn’t (and wouldn’t) down vote it, but I’ll bite.

    1. To the extent that the US tax system is progressive, this would be putting the most money into the pockets of the portions of the Black community that are suffering the least from the latent effects of slavery and racism. This is truest of income tax.

    2. Waiving sales tax would be better targeted. Unfortunately, it would most affect states and localities with the highest Black populations, with the side effect of reducing services to the exact people it was meant to help.

    3. Even if sales tax is addressed (unlikely), this would probably be in the form of tax rebates. This probably means a once a year infusion of money, subject to all the same exploitation that currently impacts income tax refunds. (Edit: Also, sales tax rebate would likely still take income into account, and thus also be regressive. If it assumes all income is spent for determining the amount to rebate, it would be even more regressive than income tax exemption.)

    4. Unless issues of structural racism are addressed in conjunction with this - issues like food deserts, differences in rates of home appreciation in predominantly black vs white neighborhoods, pollution burdens in predominantly black areas, education funding which is tied to those home values, and many other issues - the existing racist systems will suck that money back out of the Black community in ways that minimize the building of Black wealth. “Mission Accomplished” will be declared, and the political will to “do something” will need to be rebuilt from scratch.

    5. Direct cash payments (monthly, like social security) come without the drawbacks of 1-3, are simpler, and will build up a type of immediate feeling of support that will be harder to withdraw at the end of the stated term, while also proving the case for universal basic income later. That would have knock-on effects for other exploited communities (LatinX immigrants, neurodivergent, deaf, disabled, etc).










  • Probably not. It looks like it’s setting the fake address before reading the tunnel parameters, where the real address is stored. Probably a kludge in case the connection address is undefined so the program doesn’t crash. So check whether the address is included there.

    Also check the function that establishes the connection. 10.1.1.1 is not a public subnet, so unless there is a VPN device listening at the local address, the tunnel should fail to establish and throw an error, triggering the exception clause in that code. Again, you’ll want to confirm that in the code.



  • Manually keying in the pin is only needed when plugging in the device. Challenges for TOTP, FIDO2, etc. are a configuration option, and are only 3 digits if enabled (press any button if disabled).

    As for “excessive amount of security”, security as an absolute measure isn’t a great way to think about it. Use case and threat model are more apt.

    For use case, I’ll point out it’s also a PGP and SSH device, where there is no third party server applying the first factor (something you know) and needs to apply both factors on device.

    For threat model, I’ll give the example of an activist who is arrested. If their e-mail provider is in the country, they can compel the provider to give them access, allowing them to reset passwords on other more secure services hosted outside the country. The police now have the second factor (something you have), but can’t use it because it’s locked.