3 ms·
That's in theory. In actual reality, if you're making an app that has private data and is not crawled by bots, most of the time users don't save everything that
by azernik 7y ago
That's in theory. In actual reality, if you're making an app that has private data and is not crawled by bots, most of the time users don't save everything that they see.
- kijin 7y agoI think the parent means clients (user agents), not actual human users. As soon as any state that needs to be hidden is exposed to clients, that's a security breach regardless of whether any human eyeballs have seen it.
- megous 7y agoThis is true, too, but I meant users, too. It's all too common for users to screenshot things, etc. I see it a lot of the time on Twitter for example. You can delete tweets, but oftentimes it's pointless. But I also regularly see my gf taking photos with her phone of various apps she uses on her notebook, just to have the info around on her phone. I suspect it's pretty common, because it's much more low-tech then saving pages or API scraping.
- bananocurrency 7y agoBackwards. That's reality. Do you also build applications with any kind of authorization and just hope users don't do anything wrong? Sure is how users behave most of the time!