6 ms·
Yeah, but with HTTP API access, it's much more like someone who goes up to your apartment, knocks on your door, his knock is answered by your butler, he asks th
by wtbob 13y ago
Yeah, but with HTTP API access, it's much more like someone who goes up to your apartment, knocks on your door, his knock is answered by your butler, he asks the butler for something, and the butler gives him it. It's not his fault that you hired a cretin for a butler.
- aaronem 13y agoNo, but it's his fault that he exploited the butler's cretinism to gain access he knew or suspected he shouldn't have. If you're still unclear on the concept, your Google query for today is the Latin phrase mens rea; I'm no lawyer, but the impression I have is that that's the legal concept of import here.
- streetnigga 13y agoWho said anything about exploit? You made the API and it has open access. If it is private don't make it public. Absolutely no analogies are needed for that. Slap on some authentication before calling the lawyers. Lawyers are needed for when such systems have been subverted. Seems the reality distortion of blaming anyone that touches something a corporation doesn't want touched is catching on. Persons behind corporations that dispatch lawyers with great zeal are responsible for conflating their own mistakes for exploitation. For those having a hard time, just think like the NSA: Public unencrypted data will be used, but not always in the way the persons who made it public contemplated.
- aaronem 13y agoYes, and expecting that no one will try my doorknob to see if I forgot to lock it is relying on security by obscurity, and if someone exploits my having forgotten to lock my door, both the exploit, and whatever harm comes to me by it, are entirely my own fault and no one else is liable.
- streetnigga 13y agoApologize for injecting insults and vitriol into this thread if wish for a contextual reply.
- tptacek 13y agoI know that when you're in the middle of an argument it feels like you're having a 1-1 conversation, but you're not: you're writing messages to everyone on HN. This kind of "apologize first" stuff is really boring. If you don't think the person you're talking to is arguing in good faith, stop responding to them.
- streetnigga 13y agoI only caught on about the bad faith after noticing several comments in a row that included insults or slights. You are right, best course is just to totally disengage.