6 ms·
Which is exactly what you say when facing an existential crisis. If you have a master password leak you either: 1. lie about it and the truth never comes to
by willis936 5y ago
Which is exactly what you say when facing an existential crisis. If you have a master password leak you either:
1. lie about it and the truth never comes to light
2. lie about it and get caught and the consequences are the same as if you came clean
If LP suffered a master password leak then there is no benefit to telling the truth.
- imwillofficial 5y agoExcept earning trust with the customer, in a line of business that is built entirely on the customer trusting you to manage things properly.
- mgraczyk 5y agoOne advantage of telling the truth is that you don't go to prison for fraud. When evaluating this kind of conspiracy theory, it's important to consider the number of people who would have to remain silent for the conspiracy to survive, and to consider how much it would cost to keep that many people silent. In this case, it's at least a few dozen so I think it's fair to assume that such a lie would not survive very long.
- imwillofficial 5y agoThis is broken thinking built on faulty assumptions. There are countless examples of massive conspiracies and secrets never leaking.
- dreae 5y agoThen how do we have the examples?
- imwillofficial 5y agoI’m not sure I understand your question. Can you state it in a different way?
- nmca 5y agoCan you provide some? I have previously only heard "santa".
- imwillofficial 5y agoSure, I do contracting work for the military. There are hundreds of millions of secrets kept every day with hundreds of thousands of people keeping their mouths shut. Leaking is exceedingly rare.
- colejohnson66 5y agoThe military has a much bigger threat of prison for yourself than a company that the investors sue
- imwillofficial 5y agoOh absolutely. My point was strictly the assumption that many people can’t keep secrets. Depending on ideology, reprisals, or personal ethics (good and bad), secrets can be kept by a startlingly large group of people. I’ve seen estimates as high as 10% of the population of east Germany were spying on their neighbors.
- colejohnson66 5y agoI agree. Humans like sharing things, even if they shouldn't. We're bad at keeping secrets. I was just making the point that your claim of leaks in the military isn't necessarily comparable to a leak about a company. You do have a point about the large numbers of service members - that would raise the chances of something happening.
- aflag 5y agoThey are indeed different. But if they were compromised, it doesn't mean that all employees there know. It would probably be a handful of engineers only. Maybe one day one of them will make a blog post with all the details, however, there are more incentives to keep their mouths shut than otherwise. If they come publicly about this, they will get a lot of unwanted exposure (which most people don't like), they will certainly lose their jobs, they will have to talk about that in every job interview they do, they will likely get sued due to NDA breaches, etc which will actually prevent them from being hireable in many places (specially security firms). So, it's much easier for these people, if they morally object this, to just quit, find another job and move on. They'll likely tell their friends and family not to use lastpass, but that will only travel so far.
- paulcole 5y agoyou’d need a microscope to see the overlap in the vein diagram of people who lie at work and the people who go to prison for lying at work.
- devwastaken 5y agoTech companies are not held liable by the justice department or any other federal org. It's against their interests because they now depend on these services to operate. Which is why you will never see Amazon, Google, or Microsoft sued in any damaging capacity for the obvious fraud they commit. That being fake products, reviews, promoting scams, antitrust, etc.
- jjav 5y ago> In this case, it's at least a few dozen so I think it's fair to assume that such a lie would not survive very long. This is a very unlikely expectation. Employees are under NDA so nobody will talk publically about it unless one of them feel so strongly about it to sacrifice their career (they'd certainly get fired, and being sued for breaching the NDA isn't going to make finding a new job easier). Employees at all companies keep quiet about bugs like these all the time, that's the most common outcome.
- nix9000 5y ago>being sued for breaching the NDA isn't going to make finding a new job easier NDAs are unenforceable against whistleblowers who report illegal activity.
- hsbauauvhabzb 5y agoWould it actually be illegal to cover up/lie about? I assume the company is US based, there is certainly breach regulations in Aus (with a 12 month notification window). I guess if it’s publicly traded then it would be a breach of law, but what about if it was privately owned?
- fulafel 5y agoAre there examples of jail time for fraud happening for beingdishonest about sw product flaws?
- tibbetts 5y agoA few dozen, most of whom took a job at a security firm and one might imagine are the type reluctant to maintain a lie like this.
- jazzyjackson 5y agoThe consequences of “Mea Culpa, please reset your master password” seem much less existential than denying and eventually being revealed as untrustworthy.
- jonny_eh 5y ago> eventually being revealed as untrustworthy Replace "eventually" with "maybe".