@hakan_geijer As a tech person: you are absolutely right.
It is impossible to have a setup with zero risk, and to be efficient pragmatic choices will be made. Sure, a situation like this is a great time to reevaluate practices, but a lot of the takes are unreasonable in their expectations.
Even if nobody ever had an unencrypted copy of the db, someone somewhere has access to the machine (e.g. by deploying code) that can read the unencrypted db. It's a fundamental limitation of Mastodon.
@hakan_geijer I think a lot of people think encryption at rest means things it doesn't, tbh. It just means access without decryption keys isn't possible. Anyone with access to (e.g. a machine, like the masto server, with access to) the encryption keys still has access.
Imagining a ChatGPT fueled dystopia in which all work emails are needlessly prolonged by AI embellishing the text to make the sender seem more intelligent, but it's okay because recipients all just ask ChatGPT to summarize each email. It is a social faux pas to write directly or informally. People learn how to evaluate if generated emails are written in a way where ChatGPT summaries preserve the essential points.
We're going to have to make some changes around here 🏴 he/theySoftware developer.Looking for my community on here. Please tag me in if you see anyone talking about:code things;how to do software good;org and company design;building european cloud alternatives;how to make the world a better place;cool people doing neat things;stuff;other