4 ms·
Even if one could accept that Amazon cannot possibly plug all vulnerabilities and should not be expected to do so against all attacks, we're still left with the
by tdavis 18y ago
Even if one could accept that Amazon cannot possibly plug all vulnerabilities and should not be expected to do so against all attacks, we're still left with the obvious mistake of implicitly entrusting their users with the ability to -- automatically and without proper vetting -- alter whether or not certain items display on certain areas of their site. This fact, given automation via a bug or not, means that the tactic could have been used more maliciously and more covertly to bring additional damage (say, by getting an author's book delisted).
At the end of the day, do I think Amazon really deserved to be "taught a lesson"? No; he could have just contacted them with the exploit and been done with it. Could it have been worse? Most likely, yes. Plus, I found the resulting e-uproar to be quite hilarious. To think, people actually believed Amazon would intentionally and openly discriminate against those groups out of no where... it's very laughable, you must admit.
- gojomo 18y agoBut what if trusting users works 363 days a year -- it helps users find and buy more books, it makes authors and Amazon more money. Every once in a while, it causes an embarassing screwup that can be reversed in 1-3 days. Is having that system in place a mistake? What if the alternative system, that never has a 2-day-screwup, also means fewer lehappy customers and less-profitable operations the other 363 days?