• 0 Posts
  • 39 Comments
Joined 1 year ago
cake
Cake day: June 18th, 2023

help-circle



  • Sure, maybe, but I’d also say you shouldn’t let the perfect be the enemy of the good.

    Yes, we should absolutely have better mental healthcare safety nets. Yes, false positives are probably a pretty common prank.

    But this isn’t a zero sum game. This can work on tandem with a therapist/counsellor to try and identify someone before they shoot up a school and get them help. This might let the staff know a kid is struggling with suicidal ideation before they find the kid OD’d on moms sleeping pills.

    In an ideal world would this be unnecessary? Absolutely. But we don’t live in that ideal world.



  • You say “the last time this happened” as if this wasn’t a generalized trend across all schooling for the past decade or so.

    Out of the tens of thousands of schools implementing systems like this, I’m not surprised that one had some letch who was spying on kids via webcam.

    And I’m all for having increased forms of oversight and protection to prevent that kind of abuse.

    But this argument is just as much of a “won’t someone think of the children” as the opposite. Just cause one school out of thousands did a bad thing, doesn’t mean the tech is worthless or bad.


  • This article feels pretty disingenuous to me.

    It glosses over the fact that this is surveillance on computers that the school owns. This isn’t them spying on kids personal laptops or phones. This is them exercising reasonable and appropriate oversight of school equipment.

    This is the same as complaining that my job puts a filter on my work computer that lets them know if I’m googling porn at work. You can cry big brother all you want, but I think most people are fine with the idea that the corporation I work for has a reasonable case for putting monitoring software on the computer they gave me.

    The article also makes the point that, while the companies claim they’ve stopped many school shootings before they’ve happened, you can’t prove they would have happened without intervention.

    And sure. That’s technically true. But the article then goes on to treat that assertion as if it’s proof that the product is worthless and has never prevented a school shooting, and that’s just bad logic.

    It’s like saying that your alarm clock has woken you up 100 days in a row, and then being like, “well, there’s no proof that you wouldn’t have woken up on time anyway, even if the alarm wasn’t there.” Yeah, sure. You can’t prove a negative. Maybe I would usually wake up without it. I’ve got a pretty good sleep schedule after all. But the idea that all 100 are false positives seems a little asinine, no? We don’t think it was effective even once?







  • I wouldn’t let every VM have an interface into your management network, regardless of how you implement this. Your management network should be segregated with the ability to route to all the other VLANs with an appropriate firewall setup that only allows “related/established” connections back into it.

    As for your services, having them on separate VLANs is fine, but it seems like you would benefit from having a reverse proxy to forward things to the appropriate VLAN, to reduce your management overhead.

    But in general, having multiple interfaces per VM is fine. There shouldn’t be any performance hit or anything. But remember that if you have a compromised VM, it’ll be on any networks you give it an interface in, so minimizing that is key for security purposes. Ideally it would live in a VLAN that only has Internet access and/or direct access to your reverse proxy.