111–120 of 241 posts
Earlier quoted context omitted.
Can't you ban the malicious Devs? They keep creating new GitHub accounts or what?
I assume they read the code that tries to parse the data, and come up with formats that don't fit. If the code is open, they don't need accounts to see it
It's amazing how often giant IT projects like these go off the rails. Exploding costs and garbage implementations. If you start the sentence with: "A 5+ year government IT project that cost over 100 million-" I already know how the story ends. How do we improve this common scenario? What are the root causes? The common themes are: 1. Lack of technical project competence at the decision maker level. 2. Scope creep. Wh…
Earlier quoted context omitted.
Maybe Öppna Skolplattformen should just change their code to identify the token by its contents, no matter the parameter name?
We did. We have a regex to catch all variants of spellings. But since our code is open they can easily select another variant. We could load our script dynamically but have chosen not to of security reasons. (And transparency). (I’m the founder of this initiative)
While there is a technical issue here, there is also a legal issue and a PR issue.
Government institutions have a duty of care and a duty to help to private individuals. Since they are apparently working _against_ people in this case, they are probably in breach of the law.
Description of relevant rules here (in Swedish). https://www.mfd.se/verktyg/lagar-och-regler-om-tillganglighe...
I strongly suggest that you file a formal complaint against the government agency. This is easy to do and you can do it here. https://www.jo.se/sv/JO-anmalan/
When you have filed the complaint: MAKE IT PUBLIC (hacker news follow up story, twitter, linkedin, etc). This is because there is a political dimension to this issue and if there is anything politicians care about, it's jobs (their own).
Good luck and keep us updated! I'm sure lots of people will be happy to spread a copy of the complaint around.
> One parent managed to access other people's private data, leading to @Stockholmsstad being fined for bad security. ... And the fine, levied by bureaucrats paid with taxpayer's money was paid with... Taxpayer's money. “The most terrifying words in the English language are: I'm from the government and I'm here to help.” ― Ronald Reagan
Just a week ago a friend of mine (who does not share my views, and is generally positive of Reaganomics) said something along the lines of: "not only was Reagan a clown, he surrounded himself with crooks"(regarding Bush and Meese).
Can someone explain it like I'm 5?
Government organizations are terrified about open source initiatives. There's something strange about it. You could volunteer to do all the work and they'll still oppose you at every turn. My hope is that we'll reach a stage where citizen participatory programming is normal for all. Where my dad could offer a PR to fix a typo on a government page casually as he browses it. I have a feeling we're not far off but you n…
While that is always true in reality(you are always responsible for your actions), it is not legally obvious when you buy commercial products(you can blame the manufacturer).
While people are often reluctant to accept that. I find that it is often what people’s arguments in this regards can be boiled down to.
> You can understand why they arent keen to allow it to continue as its using BankID to authenticate. Would you install a 3rd party app to access your bank account? Isn't that how Mint works? https://en.m.wikipedia.org/wiki/Intuit_Mint
Additionally, that tweet is wrong. BankID is an authentication system, and won’t give the 3rd party access to your bank account
BankID is both an authentication and user information service system. Swedish customers can sign up with BankID, and the beauty of the setup is that we are exposed to less private information than we otherwise would.
On login, these same customers go through BankID flow, and we get an assertation from the service that essentially tells us "login is valid for this previously assigned unique customer identifier".
I wonder how Swedes maintain their reputation of having a well-run, corruption-free public sector?
Government organizations are terrified about open source initiatives. There's something strange about it. You could volunteer to do all the work and they'll still oppose you at every turn. My hope is that we'll reach a stage where citizen participatory programming is normal for all. Where my dad could offer a PR to fix a typo on a government page casually as he browses it. I have a feeling we're not far off but you n…
I don't know, when our libraries procured new state wide library software (each city had it's own before) they went with Koha (open source). This means that they are not really paying for development, only installation integrations and support. This opened up the bidding to much smaller players and was much cheaper over all.
Earlier quoted context omitted.
> 4. The requirements are often flat out wrong. Isn't this basically a given? I find it hard to imagine that any organization could come up with good, complete requirements before they've had any software written.
Which is why most governments struggle with big IT projects. Governments by their nature tend to approach everything from a legal perspective. This then means the requirements of these big IT project end up being a mass of legal documents which try to describe what is being delivered by whom. Then when the whole thing falls apart it ends up in the courts and the court then decides who promised what based on those ori…
The relative was asked about his CS job, and at some point details were being discussed. The relative said something like “we have made what was asked for but because we have run out of time, that’s what the customer is getting. We know what they actually want and need, but that’s not in the contract”.
The person we were talking to was the customer.
Earlier quoted context omitted.
I assume they read the code that tries to parse the data, and come up with formats that don't fit. If the code is open, they don't need accounts to see it
they need one to contribute changes though