5 ms·
> Allow a toggle with no waiting period during initial device setup I like this idea in principle but I think it could become a workaround that the same malici
by silver_sun 6mo ago
> Allow a toggle with no waiting period during initial device setup
I like this idea in principle but I think it could become a workaround that the same malicious entities would be willing to exploit, by just coercing their victims to "reset" their phones to access that toggle.
- Zak 6mo agoThat wipes all the data on the device and requires logging back in to accounts. It seems to me that's high enough friction to resist most coercion.
- silver_sun 6mo agoIsn't app data, photos etc. usually synced with the Google account? Besides, Google claims that the scammers are using social engineering to create a feeling of panic and urgency, so I think the victim would be willing to reset and log in to the accounts again in such a frame of mind.
- Zak 6mo agoSome is, some is optional, some isn't. I'm sure there's a hypothetical scenario where someone successfully runs a scam that way, but there's also a hypothetical scenario where a 24 hour wait doesn't succeed at interrupting the scam.
- silver_sun 6mo agoThe perfect is the enemy of the good.
- deaux 6mo agoWhich applies just the same to the hypothetical option during initial device setup.
- silver_sun 6mo agoI don't think it does because of the workaround I mentioned upthread.
- Zak 6mo agoThe victim also can't be on the phone with the scammer using that device during the setup process. We're talking about a very high-friction scenario.
- johnnyanmac 6mo agoNone of this is stopping a malicious entity. We keep trying to use tech (poorly thought out tech at that) to solve issues of social engineering. And no one is asking for a solution, either; it's being jammed in for control.
- thedevilslawyer 6mo agoSuch a silly statement. Of course tech can solve social engineering problem, we do so every day startign from UX design. This is a good solution to killing urgency.
- johnnyanmac 6mo agoUx is made for humans. Humans can learn to exploit UX. This is as useless a battle as fighting piracy: you will destroy your product before you solve the problem.
- survirtual 6mo agoSocial engineering is destroyed with education, not with restriction and control. Trading freedom for safety eliminates both.