4 ms·
We have collectively decided as an industry to place infinite trust in a handful of vendors for the sake of convenience. Auth providers (OIDC), cloud providers
by api 3y ago
We have collectively decided as an industry to place infinite trust in a handful of vendors for the sake of convenience.
Auth providers (OIDC), cloud providers, and numerous software repositories and SaaS providers effectively have root on the entire universe. A major compromise of any number of these large vendors could expose millions of systems to total compromise.
- deleted 3y ago[deleted]
- sneak 3y agoResultantly, these systems are almost certainly already compromised by organizations skilled enough to not get caught.
- api 3y agoI'd say nation states, which means the US and possibly other nation states effectively have root on virtually all SaaS systems. It's exactly the architecture I'd promote if I wanted a total panopticon, but I'm not suggesting a conspiracy. Ease of use is the most powerful force in computing and history has shown that people will trade privacy, security, freedom, cost, and virtually anything else for it. It does make a certain amount of sense. Time is non-fungible; no amount of money can buy more of it. So ease of use by saving time is extremely valuable and commands a high price. The problem is that IMO the cost of all this SaaS automation is higher than most people understand. There's some rather huge hidden costs here.