sudneo @ sudneo @lemm.ee

🇮🇹 🇪🇪 🖥

---

Read more

Posts

0

Comments

569

Joined

1 yr. ago

Just a thought: what happens when that "we" is people who - say - think the courts and the police are not doing their job in sending home all "these illegal immigrants" or something like that?

And Musk, and the Hungarian boxer, and many more around the World. This has been a worldwide case, not just a private US shitshow.

I had to search, and I did find a few articles talking about a rumor.

I don't think the two events are of same scope and magnitude. The Khelif's case has been a worldwide media case, what I found for was very US-specific and limited to some niche deranged corner of the internet (https://www.snopes.com/news/2023/07/27/katie-ledecky-trans-rumors/ listed Facebook and Twitter posts from individuals and 2 articles).

Possibly I shouldn't have used US athletes as example. Given how the topic is so controversial there, I am quite sure you can find a few idiots who would make this claim about any athlete.

Sure! FYI, simplelogin can create aliases with prefix! I usually get service-{random 5 chars}@simplelogin.com, so you can still sort by folder using prefixes.

That seems both unlikely and - to be honest - completely exaggerated and useless.

None of those, really. Just that downplaying successful women doesn't happen as much in sport, and when it does it's not by stating they are men.

If %10 of successful women have ever been downplayed because of their gender (due to unconscious biases for example) vs %1 of successful men, then this is still a handful of examples which nevertheless points to a significant bias.

1. Ok, but where is the data?
2. Sure, it point to the fact that women's success are downplayed. Not that when women are successful they are called men.

when a man breaks a record he is a super human, when a woman breaks a record she is a man.

How did I miss the point? To me it seems clear that what you were saying that women can't be successful, if they are, they are considered men (because men have success).

I am not fixating on the example, sorry, it's the whole thesis you condensed into this sentence that I am fixated on. Women's success can be downplayed in many ways. Either way, in sports in 2024 I don't think this is as much of a problem as it is - say - in business. Most importantly, I think this case had not much to do with downplaying Imane's success (the whole case started waaaay earlier she won the medal), but simply with other factors.

You can take any other boxer, I specifically chose black and "masculine" athletes as examples to show that even race/body type alone was not the determining factor. In these Olympic games you have just Imane's example: how can you call this a trend or make general statements with one case (not even the Taiwanese boxer got attention)?

What do you mean? Comparing the rate at which women are subject to such effects vs men is a worse statistic than saying “but many successful women are not subject to such effects”? If there is a systematic bias towards women’s success being downplayed, you cannot call this an isolated incident of stereotypical bias.

Men don't have a category to which they are wrongfully assigned when they win sports. This is also because men are the higher category in most sports (i.e., higher performers), so it is a parallel that simply doesn't make sense. So yes. It is a worse statistics because men who are victim of gender stereotypes are generally not the ones who excel at sports (men who are called women in general break the masculine stereotype of the muscular and competitive guy - and these unsurprisingly are not characteristics common in elite athletes).

If there is a systematic bias towards women’s success being downplayed

But this was not your claim either. Your claim is that downplaying is done by specifically saying those women are men. The whole point here is on the cause, not the existence of the phenomenon in general.

To be honest I don't consider something being Russian as automatically 100% false. This case from the IBA seems likely made up, or at least it is until they provide further proof, which they didn't so far.

That said, this is irrelevant in this particular conversation. Real or not, that precedent is in my opinion partly responsible for why people decided to attack this particular athletes. I agree with you on the next country also playing a role.

Basically my whole argument is that there are multiple factors that made this a case. The fact that she "broke records" or "had success" is generally very low in the list, imho.

but there are other very successful women who have not been treated that way

What I am actually saying is that the vast majority of successful women athletes didn't suffer from this at this time at all. If this argument works only for Imane Khelif (not even the Taiwanese boxer, who has been mostly ignored), out of the hundreds of women who just won medals, maybe it is not an argument that can be generalized to "women of success", and other causes have to be searched.

This to me is basic common sense: if a thesis works only on a handful of examples and there are hundreds of counter examples, maybe the thesis is wrong. A tendency would require also more examples.

Those look nothing like "tools" to me.

I will make it simpler: In this very thread a person talked about "high testosterone". Why they didn't say the same about the 99% of the women who won competitions? Probably because of a combination of factors:

• The masculine aspect of this particular boxer, that doesn't fit the image that many people have of women
• The media reporting the immediately pushed to a polarization of opinions -> you had to take a side
• The previous IBA debacle that planted the seed of the doubt

To me the combination of the above is a much better explanation of the causes for which people attacked this particular boxer, and not the many other women of success, including black and including masculine (e.g., Simone Biles, or Grace Bullen).

historically of women whose success has been deliberately downplayed because she does not fit the stereotypical women in their head vs men who suffered from the same

I really don't see how this measurement can lead to any conclusion. How can you not measure the amount of women who don't fit the stereotypical woman aspect and yet whose success has not been downplayed due to their aspect (i.e., people called them men)?

I doubt that fight can be counted as "exceptionally good performance", but anyway why the same didn't happen for those that both performed exceptionally well and actually set records?

There are so many examples of that not happening that makes me seriously doubt it identifies the right cause(s).

At the moment we don't have any concrete data, so in case it is based on a suspicion at most.

I am sure that's the case, but I think this has not to do with "breaking records" I.e. having success in sport. It might have to do with general gender stereotypes related to body types, for example, or with other stuff.

So either way the comment I was answering to seems counterfactual and sensationalistic.

Did she break any record? Also AFAIK the same didn't happen to previous medalists or generally the strongest female boxers. It also didn't happen with other monsters who broke tons of records (e.g. Katie Ledecky) just during this Olympics.

This makes me think that it's not what you are saying but there are probably other reasons in play. Probably the IBA and the media making a case after the first boxer withdrew are responsible.

You should definitely be! I take backups every 6h for my self hosted vaultwarden (easier to manage and to backup, but not official, YMMV). You can also restore each backup automatically and have a "second service" you can run elsewhere (a standby basically), which will also ensure the backup works fine.

I have been running bit/vaultwarden now for I think 6 years, for my whole family and I have never needed to do anything, despite having had a few hiccups with the server.

Don't take my word for it, but the clients (browser plugin, desktop app, mobile app) are designed to keep data locally I think. So the term cache might be misleading here because it suggests some temporary storage used just to save web requests, with a relatively quick expiration. In this case I think the plugin etc. can work potentially indefinitely without server - something to double-check, but I believe it's the design.

Interesting! That's very close to this blog post I read long time ago (unfortunately medium.com link)! Are you actually sending emails from those addresses? Like if you need to drop an email to your bank, do you use the banking one or your personal (or something else)?

Fwiw, I do something similar. I use a mix of domain aliases without address (e.g. made-up-on-the-fly@domain.com) and actual aliases. Since I have proton family (and the same when I used ultimate) I have unlimited hide-my-email aliases, so I have it integrated with my password manager, and I generate a random password and email for everything I sign up now. These though are receive-only addresses. In fact, with this technique I probably use 3-4 addresses in total, but I have probably 30 domain addresses that go to the catch-all one.

Spam on these addresses are basically non-existing and you can still create folders based on recipient without having a full address (e.g. bank1@domain.com, bank2@domain.com). You can make folder categorization based on recipient regex and this way you also have the "stop bothering me" option: if some email gets into the wrong hands, you can create a spam rule for that dedicated address. However, my approach is that all of these are used just to receive emails, to send I have just a handful of actual addresses or -if really needed- I can create on-the-fly an address from a catch-all one, send the email and then disable it again (so it doesn't count towards the limit, but I still get inbound email to the catch-all).

Nice setup anyway!

Your requirements are totally fair tbh.

That said, I think you can use aliases for the use-case you have, you don't need full addresses. Proton supports "+ aliases" as well, so name+service@domain works, and most importantly they support catch-all addresses if you have your own domain. I now use actual aliases (the ones from simplelogin), which I generate on the fly, but if you can use whatever@domain and it will be redirected to your configured address. You don't even need to create this beforehand, so many times I was around and had to give an email address for some reason and I just made up an address on the fly. As long as you use your domain, the catch-all will get the email.

So the 10 addresses only include actual addresses, the ones you can write from. You can have as many as you want to receive emails (which is generally the use case for signing up to services, right?). Just a FYI in case tuta supports the same and you are making more effort than needed!

If XMPP were to replace emails, that would’ve been great

Who knows :) But XMPP also needed all kind of extensions to support even relatively old security measures.

Anyway, I still don’t trust Proton. Have a great day.

That's fine, you can trust who you want, of course. The important thing is to have clear the risk model.

Encrypted or not, the fact that someone else has it stored somewhere in their computers is dangerous.

Of course. You are simply over-representing this risk, though. Besides, regular people realistically don't need to worry about Proton being backdoored, because their device is 10-100x more likely to be breached instead. Security is not a binary, it's a shade. Performing a software update is also "dangerous". Do you check every time you update the software its code, to verify no malicious backdoor is there? No, exactly, you trust the maintainers and the package infrastructure.

The only recommended way to store private keys are offline and encrypted.

So you don't store them on your device(s) (encrypted)? I store my GPG keys that I use to sign software on my yubikeys. That said, email is something I check from my phone and multiple computers (as most people). Do you really use a hardware key to do on-the-fly decryption, every time someone sends you a message, from each device?

As a security engineer, I also generally discourage such absolute "recommendations". My threat model is different from a regular Joe threat model, and both are different from Snowden's. There is no such thing as "only recommended way", because this is not a religion, it's a risk decision. Most people use Gmail, where the content of their email is literally available server side. Those same people can gain privacy and security using GPG via Proton, and in their threat model "provider gets compromised and software backdoored" is completely irrelevant. Is it relevant in your threat model? Good, then yes, you should only store keys offline and encrypted. Actually, you shouldn't use email at all, and you should use dedicated tools and protocols that are meant for security, where metadata is not transmitted in clear text, for example. You should also have virtually no session duration and perform a full login with 2FA every time, you should probably access the software that you use to communicate only from a secure machine dedicated for the purpose etc..

I think you trust Proton a bit too much.

I simply have clear in my mind what my threat model is and what risks are acceptable. I perfectly fit in the "Anyone with privacy concerns" category in the threat model they built. What about you?