• 1 Post
  • 101 Comments
Joined 1 year ago
cake
Cake day: July 1st, 2023

help-circle




  • It should be $0 because this was a credential stuffing attack (Using breached passwords people reused), and affected people who knowingly shared their data with other people.

    23&me didn’t leak data, they didn’t have any database breaches, their infrastructure wasn’t compromised due to negligence…etc The majority share of negligence is in the users here.

    Yes, they should have MFA, but also no, most sites and services don’t force you to use MFA to begin with, and that’s not a regulatory requirement anyways.

    This is, for the most part, the fault of the folks using terrible security practices such as refusing passwords and sharing their data with other users. And this is a shitty precedent to set where the technical reasons for this event are thrown out the window in favor of the politics of it.
















  • This… Isn’t how large scale technologies work. Not even close, not even “same planet” close. That’s also not how antitrust breakups work, why open source private technologies? How do you think that’s supposed to work? How does that precedent work?

    You could open source all ~15,000+ repos from my company, and be entirely incapable of actually operating the grand majority of it. And we’re, maybe, 1/10,000th the size of Google on the tech side.

    You also can’t just “split” a single technology apart, that’s gloriously, ignorantly, simplistic. You’re talking potentially years of dedicated work by hundreds, thousands, of individuals to achieve something like that. How do you expect that to operate?

    It’s going to be a nightmare to just rip seemingly unrelated, but interdependent, verticals of Google apart. Your request here is wholely unrealistic.


  • They could, but as it currently stands media hosting on the fediverse… Sucks.

    It’s obscenely expensive for everyone involved, and scales poorly. It’s just not ready to operate at scale at this point.

    I’m sure it will get better, but large storage costs are better off being handled by a distributed file-system where a minimal level of duplication is baked in, but the storage load is reasonably spread out instead of fully duplicated on each peer.

    There are technologies for this, but they all have their own issues. And tomorrow there will be n+1 distributed filesystems, fragmenting it further.