Comment by kypro

Comment by kypro 2 days ago

1 reply

> What if I could ask patio’s archive: “what are some good books to read about [topic]” or “what advice would you give to someone trying to get a job at Stripe”

Or what if I could ask: "Given Omer Shehata's Twitter history, formulate a phishing scam that he would be likely vulnerable to".

The problem I see with here is that there are far more bad actor use cases for identifiable user data than good. In my opinion the main reason most social networks have stopped doing public by default and now do private by default is because not doing so opens them up to Cambridge Analytica type scandals where people don't realise what they're signing up for.

Personally if you do this, I would be very clear with your users that by submitting their data it will be made available publicly in an identifiable form. And that even if they revoke their data from your service it's possible for their data will continue to be archived by others, possibly for malicious reasons.

theexgenesis 2 days ago

Dev here.

Cognitive security vulnerabilities like this are the thing I'm most concerned about. I think it's right to be very upfront about risks like these, and I'm even considering if we want to walk back the fully public thing and make it private / invite-only instead.