I think all of your points are very valid, but it doesn’t remove the point that the government is trying to make it free and easy for application builders to do a little bit better than they are today. This is commendable on its own, even if it’s not perfect.
replywhat i understood from the above comment is that the government should first do the basic policy making (set some non-negotiables for the ai companies etc) before jumping into solution building. let the market figure out the tech solutions.
replyI find it interesting that the co-author of the OP violated long-standing security practices and copied a social security database into an insecure AWS instance without proper oversight.
replyIs it still commendable if in order to develop this, the taxpayer-funded developer themselves published our PII to a consumer, privately controlled third-party server without following federal data security protocols? Seems like an attempt to make up for the damage they caused.
Standing up your own AWS-equivalent internally is not much work, yet the PII data leaked to publicly available services due to this developer's personal choices and lack of oversight to prevent sensitive government data from being published externally.
Notably, this resulting work has not been published as public domain (CC0).
Point is completely fair. It seems to be sort of a grey area that they skim over entirely on your point about sharing deep personal info.
reply