3 ms·

No matter who you are and how much "security" you have, you're not beyond the reach of hacks or inexcusable exploits. Microsoft, Google, Facebook all spend bill

by 0xy 5y ago

No matter who you are and how much "security" you have, you're not beyond the reach of hacks or inexcusable exploits. Microsoft, Google, Facebook all spend billions on security and have all been pwned to varying degrees. Microsoft's Azure has had multiple cross-tenant exploits revealed in the last 3 months, absolutely inexcusable flaws. One of them exposed a large swathe of Fortune 500 companies' data. You're not "safer" at Azure than a small provider spending almost nothing on security, because of the impact of more attention and a larger target on your back. Dunking on providers for being hacked is essentially victim blaming. There's a roughly 100% chance the providers you choose are vulnerable or have lost your data at some point in time.

aniforprez 5y ago
This is not true at all Yes a determined hacker will be able to breach systems and securities and vulnerabilities in hardware and software are found all the time. But a company that invests in security will almost always be less likely to be hacked and your data stolen. This does not mean the company is immune but, like in the case of Epic, if you store your data in an insecure location, you're practically asking to be hacked. It's not "victim shaming" to point fingers at a company with appallingly bad security
- 0xy 5y ago
  If you host with Azure or Epik you were exposed to serious security vulnerabilities in the last 3 months. You seem to be claiming Azure is less likely to be hacked, however Azure has had cross-tenant security vulnerabilities. You can't claim Epik is an "insecure location" while Azure is not while Azure has the absolute worst kind of security vulnerabilities. I'll remind you that Microsoft spends multiple billions of dollars on security and has large security and incident response teams :)
deleted 5y ago
[deleted]
beezischillin 5y ago
I'm not particularly happy that this happened but bear in mind that this isn't just your regular small provider. Gab, Epik and Parler (I guess Parler probably less so, but still) have very publicly antagonised a large amount of politically-motivated activists while also not making some of more basic steps to secure themselves. So you're basically inserting yourself into a political battle while risking your data. I feel sorry for the victims but that's the extent of it. The motivation behind hacking Ubiquiti, SonicWall, SolarWinds and even Azure is very different and that matters.
- 0xy 5y ago
  Cloudflare hosts white supremacist websites, anarchist groups, malware providers, hacking groups and otherwise yet if they were hacked I wager you would not have the same response. Why is that? In fact, Cloudflare currently provides services to Gab. Is this a case of double standards on your part for political beliefs of the founders?
  - croon 5y ago
    An encyclopedia may feature nazi iconography or text. That's different from a book only featuring nazi iconography and text. Regardless of our respective views, yours is not an accurate comparison.
    - notadev 5y ago
      Have you reviewed the data yourself? Very few of the domains containing Nazi or far-right terms have ever actually been live sites. The ones that are/have been live are a very tiny subset of the overall customer base. There was a recently suspended Twitter account, @epikfailsnippets, that was publicly outing “the fash”. They got a handful of sites that were actually hosting hateful content before moving on to “Christian fascist” websites because there really weren’t as many hate sites as they claimed/expected. The majority, well over 99%, were innocent users using Epik for domain services.
  - user-the-name 5y ago
    I absolutely have a huge problem with CloudFlare. They are providing services to KiwiFarms, which is responsible for multiple suicides. That is not how an ethical company operates.
rvz 5y ago
> No matter who you are and how much "security" you have, you're not beyond the reach of hacks or inexcusable exploits. Microsoft, Google, Facebook all spend billions on security and have all been pwned to varying degrees. Yeah. Thanks to some bug bounties, which is a small part of the billions spent on security with some hackers is one of the solutions to this. Without that, I think you would have a wild west of 0day exploits every day on lots of high profile companies. One day Anonymous will try to target someone else that they don't like and it could be any random S&P 500 company next. Who knows.

by 0xy 5y ago

aniforprez 5y ago

This is not true at all Yes a determined hacker will be able to breach systems and securities and vulnerabilities in hardware and software are found all the time. But a company that invests in security will almost always be less likely to be hacked and your data stolen. This does not mean the company is immune but, like in the case of Epic, if you store your data in an insecure location, you're practically asking to be hacked. It's not "victim shaming" to point fingers at a company with appallingly bad security

0xy 5y ago
If you host with Azure or Epik you were exposed to serious security vulnerabilities in the last 3 months. You seem to be claiming Azure is less likely to be hacked, however Azure has had cross-tenant security vulnerabilities. You can't claim Epik is an "insecure location" while Azure is not while Azure has the absolute worst kind of security vulnerabilities. I'll remind you that Microsoft spends multiple billions of dollars on security and has large security and incident response teams :)

deleted 5y ago

[deleted]

beezischillin 5y ago

I'm not particularly happy that this happened but bear in mind that this isn't just your regular small provider. Gab, Epik and Parler (I guess Parler probably less so, but still) have very publicly antagonised a large amount of politically-motivated activists while also not making some of more basic steps to secure themselves. So you're basically inserting yourself into a political battle while risking your data. I feel sorry for the victims but that's the extent of it. The motivation behind hacking Ubiquiti, SonicWall, SolarWinds and even Azure is very different and that matters.

0xy 5y ago
Cloudflare hosts white supremacist websites, anarchist groups, malware providers, hacking groups and otherwise yet if they were hacked I wager you would not have the same response. Why is that? In fact, Cloudflare currently provides services to Gab. Is this a case of double standards on your part for political beliefs of the founders?
- croon 5y ago
  An encyclopedia may feature nazi iconography or text. That's different from a book only featuring nazi iconography and text. Regardless of our respective views, yours is not an accurate comparison.
  - notadev 5y ago
    Have you reviewed the data yourself? Very few of the domains containing Nazi or far-right terms have ever actually been live sites. The ones that are/have been live are a very tiny subset of the overall customer base. There was a recently suspended Twitter account, @epikfailsnippets, that was publicly outing “the fash”. They got a handful of sites that were actually hosting hateful content before moving on to “Christian fascist” websites because there really weren’t as many hate sites as they claimed/expected. The majority, well over 99%, were innocent users using Epik for domain services.
- user-the-name 5y ago
  I absolutely have a huge problem with CloudFlare. They are providing services to KiwiFarms, which is responsible for multiple suicides. That is not how an ethical company operates.

rvz 5y ago

> No matter who you are and how much "security" you have, you're not beyond the reach of hacks or inexcusable exploits. Microsoft, Google, Facebook all spend billions on security and have all been pwned to varying degrees. Yeah. Thanks to some bug bounties, which is a small part of the billions spent on security with some hackers is one of the solutions to this. Without that, I think you would have a wild west of 0day exploits every day on lots of high profile companies. One day Anonymous will try to target someone else that they don't like and it could be any random S&P 500 company next. Who knows.