4 ms·
Of course it needs to be manually. Fail open? A warrant canary system setup for the sole purpose of telling the whole world (and the clients, of course) that th
by spacefight 12y ago
Of course it needs to be manually. Fail open? A warrant canary system setup for the sole purpose of telling the whole world (and the clients, of course) that they were hit by not posting "a declaration that, up to that point, no warrants have been served, nor have any searches or seizures taken place".
Can there really be a fail-open or fail-safe here?
Edit: "not posting" fixed.
- StavrosK 12y agoYes, forgetting to update the canary = safe. If you had a system that signed stuff until you stopped it, it would fail unsafe, i.e. it would keep telling people they're safe when they weren't.
- spacefight 12y agoYou realize, that forgetting to update the canaray gives the same message as "we were hit by a big fucking NSL, don't trust us and our software and systems ever again as their security has been compromised."? From the outside, there is just no way of knowing that it was just a forgotten update or if it was a strong message.
- StavrosK 12y agoHey, I'm not any happier about this than you are. I'm just saying that at least it doesn't lull users into a false sense of security, which would have been disastrous.
- spacefight 12y agoWhat's your threshold to "disastrous" in terms of a missing warrant canary then? 3 weeks? 1 month? 2 months? longer?