Beautiful site but gives absolutely no information on how the product works.
Schluss – A secure vault for personal data
21–30 of 43 posts
Re: Schluss – A secure vault for personal data
#22I like the idea and I think (and hope) someone (hopefully not a FAANG) will manage to build a product. As for schluss.org specifically, I don't see any reason to trust them. On a side note, I also find their "Responsible Disclosure" page at https://schluss.org/responsible-disclosure/ to say the least, funny: - "Your reward. We work as a community, in which you contribute to improve Schluss. With this you contribute t…
Indeed, it seems like we'd be hopping out of distributed frying pans into a centralized fire.
Re: Schluss – A secure vault for personal data
#23Seeing the Brexit slogan "take back control" used all over the place is so funny.
Re: Schluss – A secure vault for personal data
#24Idea-wise, this seems similar to Tim Berners-Lee's Solid ( https://solidproject.org/ ). The problem with these approaches is that no significant company is going to do this voluntarily. And this is not going to make a dent until Meta, Apple and friends do it. They are not going to do it because it doesn't give them an advantage, it only makes their lifes harder. It makes it harder even if they don't use the data for…
Solid is a specification that allows for decentralized data storage in so-called pods. The idea is that consumer applications don't store a copy of your information in their own silo - thereby having many copies of your data floating around with 3rd parties - but instead query your pod. That's the ownership / self-control aspect of the idea. The crux is that you can self-host your own solid server with your own pods,…
It would work with legislation if the loss of personal data of third parties induces extremely high fines that it simply isn't worth it anymore. Fines that could almost ruin even large players. Exception has to be business data since there is simply no alternative but the distinction isn't as trivial as it seems at first.
Since many would not be able to store user information they are reliant on people hosting themselves or at a service. I know it is difficult to explain that having control about your data is important and probably the most significant barrier. There are non-technical people that value privacy and data protection but most of them are highly educated.
Re: Schluss – A secure vault for personal data
#25The hardest part: almost nobody is willing to sacrifice the "convenience" or contribute to alternatives.
Re: Schluss – A secure vault for personal data
#26schluss.org is currently not accessible
Re: Schluss – A secure vault for personal data
#27Sounds like a for-profit version of IRMA (https://privacybydesign.foundation/irma-explanation/)
Re: Schluss – A secure vault for personal data
#28In case anyone was as mystified as I was by the original title of this submission, apparently "basta" is Italian for "enough, stop it".
Re: Schluss – A secure vault for personal data
#29Earlier quoted context omitted.
Solid is a specification that allows for decentralized data storage in so-called pods. The idea is that consumer applications don't store a copy of your information in their own silo - thereby having many copies of your data floating around with 3rd parties - but instead query your pod. That's the ownership / self-control aspect of the idea. The crux is that you can self-host your own solid server with your own pods,…
It would work with legislation if the loss of personal data of third parties induces extremely high fines that it simply isn't worth it anymore. Fines that could almost ruin even large players. Exception has to be business data since there is simply no alternative but the distinction isn't as trivial as it seems at first. Since many would not be able to store user information they are reliant on people hosting themse…
It would be much easier just to mandate that storing customer info is not allowed as a company.
Re: Schluss – A secure vault for personal data
#30I still don't understand how one can retract access once given. If I share my purchase history with some financial web app and later decide to retract access the web app will no longer get new data, but how can I be sure they don't keep a copy of my old data around? Same with GDPR. I often ask companies to remove my data, and legally they should, but I highly doubt many of them do indeed scrap all my data. I still ne…
Recently I've been exploring an idea of extension of authorization frameworks like OAuth or GNAP where you can authorize not only access to your data directly but execution of specific computation (be it a specific revision of container image) on it. You would review, in advance, what would be done your data and if suspicious just reject. Ideally the web service pulls the container image and run it on their host, then return the result of the computation to the third-party, keeping the original your data secret. You wouldn't have to give the plain data which would easily be copied in first place. The problem is, I'm not sure if the class of application that can be implemented in this scheme is large enough to be useful.