3 ms·
Directly security-focused products like lastpass are the only things that have any market pressure whatsoever on this, and that's because they're niche products
by advael 2y ago
Directly security-focused products like lastpass are the only things that have any market pressure whatsoever on this, and that's because they're niche products for which the security is the only value-add, marketed to explicitly security-conscious people and not insulated by a whole constellation of lock-in services. The relevant security threats for the overwhelming majority of people and organizations are breaches caused by the practices of organizations that face no such market pressure, including constant breaches of nonconsensually-harvested data, which aren't even subject to market pressures from their victims in the first place
- PaulHoule 2y agoI wouldn’t point to LastPass as an exemplar… https://www.theverge.com/2024/5/1/24146205/lastpass-independent-company-security-breaches https://www.theverge.com/2024/5/1/24146205/lastpass-independ...
- advael 2y agoI didn't, and my point was exactly that it's not a great one, so I think we largely agree here
- the8472 2y agoEven for security-related products the incentives are murky. If they're not actually selling you security but a box on the compliance bingo then it's more likely that they actually increase your attack surface because they want to get their fingers into everything so they can show nice charts about all the things they're monitoring.
- advael 2y agoAye. My internal mythological idiolect's trickster deity mostly serves to personify the game-theoretic arms race of deception and is in a near-constant state of cackling derisively at the efficient market hypothesis