• 1 Post
  • 113 Comments
Joined 2 years ago
cake
Cake day: July 12th, 2024

help-circle




  • I doubt home inspections would fly with German law. Unpaid overtime is legal as long as the legal limits wrt to total working time and minimum wage are met (which they will if you are making 80k…). Requiring the home office to be secured seems legal depending on the working environment (does it also need to be secured outside of working hours?).

    They can require work on weekends and holidays with no notice

    Working weakends or Holidays can be legal depending on the work . No notice seems illegal (unless they are paying you to be on call).

    There isn’t a single mention to remote working on the contract

    This is a red flag, there is no obligation for employers to enable remote work, so if it’s not in the contract you don’t have anything to fall back on. This might be especially problematic for working from outside of the EU.

    They can relocate me to any place with a 2 months notice

    If it is really that broad that is probably unenforcable.

    Take all of this with a grain of salt, I am not a lawyer.

    Honestly, depending on how much you like the position otherwise and how much you need the job, I’d tell them to change the contract (esp. the homeoffice clause) or you’re out and then just walk if they don’t.













  • How do you currently store your passwords? I would also consider that a third party with an adittional atack surface if you are considering the passkey location one.

    Also your argument

    (if you ignore the operating system, web browser, network protocols, etc., but that’s part of using the tech).

    is faulty. That is because passkeys exist in part to mitigate those atack vectors. Mitm, a compromised browser or client, etc. is less of an issue with passkeys. The information transmitted during an authentication can not be reused on another authentication attempt.

    I don’t agree on passkeys complicating things either. For me the authentication-flow is not more complicated then KeePasses autofill.

    Assuming one can be ‘tech savy’ enough to not fall for fishing is bad. There are quite advanced attacks or you might even just be tired one day and do something stupid by accident.

    What’s that now? The weak point is the user’s ability to implement MFA and biometrics? The same users who couldn’t be bothered to create different passwords for different sites?

    You don’t expext the user to ‘implement’ mfa or biometrics. You expect them to use it. And most places where a novice would store passkeys don’t just expect but enforce it. It is also way simpler to set up biometrics on one device compared to keeping with a good password strategy.