4 ms·
Honest question; in a small MVP like this, how would I, as a developer, ensure that I cannot access user data? I understand that you can encrypt at the app or d
by JonoW 15y ago
Honest question; in a small MVP like this, how would I, as a developer, ensure that I cannot access user data? I understand that you can encrypt at the app or database level, but at the end of the day I would have (or could get) the encryption keys (obviously in an established company there would be protocol about who has access).
I guess you could use the users own password to encrypt the data, but then you're pretty stuffed if they forget it. Ideas?
- VonLipwig 15y agoHonest answer.. I don't know. Its not so much about encryption. It is more about data protection and restricting data access. In their FAQ regarding if they have access to account information... "Yes. But with 100s of people using the app, it's really not interesting to run after your details." I would expect that in a lot of application's it is possible to pull out client data one way or another. The way this is written makes it sound like client details are sitting on a desk and the only reason they aren't rooting through your details is because you aren't interesting enough. Well.. what happens when you apparently offend the designer on HN and become of interest. The answer should be technically yes but no. A developer could engineer access or pull data from a client database. However, breaches like this aside, there is no formal way to access your account or see your data.
- JonoW 15y agoYup I do agree with you that the FAQs should come across as though they will do their absolute best to protect your financial data and restrict who can see it.