Grendel

@sp3ctr4l
I’m sorry, I’m bad about humor going over my head 😅

@sp3ctr4l
Isn’t it a joke about the file system?

https://en.wikipedia.org/wiki/File/_Allocation/_Table?wprov=sfla1
@cm0002

@deadbeef79000
@cm0002

I can’t believe that they criticized the vendor api for not having confirmation.

It’s a freaking API!!! It’s designed for automation, not direct human (or LLM!) use. If you added confirmation then devs would have to code automatic acceptance, which defeats the purpose.

It doesn’t make a bit of sense. Someone is passing the buck.

@axx
The ghost of Steve Jobs has entered the chat.
@cm0002

@W3dd1e
@rumba

I have spoken to multiple parents about how dangerous this “game” is.

I tell them that I’d let my kids walk across times square in NYC alone before I’d let them play Roblox.

Honestly times square is pretty safe these days, but it seems to be an effective analogy to other parents emphasizing the kind of danger that roblox presents.

@scrubbles

Don’t worry it’s completely different now. Martha retired so now Mary Ellen sends the emails.

@vrek

@SpaceCowboy

Then how do I know what I am not allowed to access?

In this specific case there was no (formal) indication that the data was out of bounds.

I can’t put 10 pdf files in a web dir and claim 5 are public and 5 are private, then charge you with a crime for viewing them.

You can’t have “unauthorized access” when there’s no authorization at all

@iii

Yeah the internet by design is a public space, and we must be responsible and treat it as such when handling sensative data.

Again, it was very wrong for people to take that data and especially to post like that.

The company also has to do their part and produce at least some kind of barrier to the data.

Even using UUIDs and making sure the data wasn’t query-able would have been something.

@SpaceCowboy @JackbyDev

In a legal context there’s also the concept of a “reasonable expectation of privacy”. The computer abuse and fraud act defines hacking as accessing data or systems you are not authorized to access.

A better analogy is putting your journal in a public library and getting mad when somone reads it.

I’m not saying what these ass holes did was right, I’m saying that the company weakened their legal position by not protecting the data.

@EmilyIsTrans @lena

sounds like firebase itself is a hack.

I’m honestly embarrassed by my fellow devs more often than not these days.

What the fuck happened to craftsmanship? Or taking pride in your work?

oh right, techbro startup culture garbage ended it.