Remix clone Hacker News

I'm not sure how it would be possible to run a functioning government without some departments storing some sensitive data.

"On the grounds of privacy it should be criminal for the agency authorised to fund medical treatments to store people's sensitive medical records related to treatments they pay for" sounds like a much less defensible proposition than "on the grounds of privacy it should be criminal for what is nominally the government's IT advice body to hire a bunch of script kiddies without proper vetting or any genuine auditing credentials to download said sensitive medical records, store them as insecurely as they like, cross reference them with whatever other sensitive data they find on the grounds that they might be able to use them to tweet dubious claims about waste"...

▲

roenxi 2 days ago | parent [-]

If people checking that the records make sense isn't kosher; why do they need to store those records? The government only really needs to hand out money and the technical details can happen somewhere else; sign them up for #n recurring payments, keep some anonymised aggregate stats and throw away the records. They can even keep their own records signed off by the government; we have the tech where none of this stuff needs to be stored centrally.

We can call anyone a script kiddie. I know some people who do data analysis for government health departments. Calling them a script kiddie wouldn't be respectful but they are youthful and do run scripts. The process appointing Musk is was more public and accountable than the one appointing my friends. Musk even gets public debate on the subject of whether hiring his people is a good idea or not. They're being very well vetted.

People are weird. I feel like a lot of ink gets spilled pointing out that one day the government will be controlled by people you don't like no matter who you are. But that argument doesn't seem to get through to all these people who panic every time it turns out that democracies don't always elect the same people with the same ideologies over and over. Government isn't trustworthy and people shouldn't be discovering that en masse in February 2025.

	▲	notahacker 2 days ago \| parent [-]
		> If people checking that the records make sense isn't kosher; why do they need to store those records? The government only really needs to hand out money and the technical details can happen somewhere else; sign them up for #n recurring payments, keep some anonymised aggregate stats and throw away the records. They can even keep their own records signed off by the government; we have the tech where none of this stuff needs to be stored centrally. I mean, even if it was as simple "$n recurring payments for $drug to $SSN over $period", that absolutely is sensitive private information, especially when linked to originally entirely separate but equally critical records about someone's employment by a body tasked with firing people... It absolutely makes sense for records to be audited with great care by qualified people in an airgapped environment with anonymization by default, but that's not what's happening here, is it? It's like I'm actually pretty convinced that it's necessary for the state to be able to arrest and incarcerate people, but I'm not convinced that the "due process" bit doesn't matter or that untrained edgelords to be making the decisions on incarceration is fundamentally the same as having police, prosecution and a trial to lock people up. I don't think the answer to the fact I might not like every executive the electorate votes in (or every law that exists) is to defund police, I think the answer is to have due process, and not due process that is de facto abolished on the day a new executive assumes power. It's much the same with governments being able to store some data > We can call anyone a script kiddie. I know some people who do data analysis for government health departments. Calling them a script kiddie wouldn't be respectful but they are youthful and do run scripts. I think it's a pretty accurate description for a 19 year old whose short and undistinguished career history involves being fired from an internship at a cybersecurity firm for leaking its secrets to a competitor, and soliciting DDoS attacks on The Com. Certainly better than "very well vetted". I imagine young people you know that do data analysis for health departments have more auditing experience, fewer red flags, very carefully controlled access to data and senior people training them and checking their work. They would, I imagine, also be competent enough to be unlikely to confuse $8b and $8m when estimating cost savings...