setVeryLoud(true);

He / They

Software Developer

  • 3 Posts
  • 268 Comments
Joined 1 year ago
cake
Cake day: April 19th, 2023

help-circle





  • I’m a full-stack software developer working in the financial sector, their statement is factual.

    Companies will never want to take on liability that has the potential to bankrupt them. It is in their best interest to not reveal the version of libraries they are using as some versions may have publicly known vulnerabilities, and it would make it incredibly easy for attackers to build an exploit chain if they knew the exact versions being used.

    Securing client code is just as important as securing server code, as you don’t want to expose your users to potential XSS attacks that could affect the way the page gets displayed, or worse, leak their credentials to a third party. If this happened in the EU or some parts of Canada, and it’s been found that the company reduced their threat model “for the sake of openness”, they would likely be fined into bankruptcy or forced to leave the market.

    Unfortunately, this is one of those cases where your interests and ethics will never be aligned with those of service owners as they are held to a certain standard by privacy laws and other regulations.



  • Genuine question, would you be willing to pay for all the content you consume using a “token” system where each page, video or other piece of media has a price to it, usually about a cent per article or 5c per video, is automatically debited from either an account loaded with real money or some sort of blockchain, at the discretion of the user? A token could be one cent.

    There’d be an open API, and multiple brokers could handle that transaction for you, so there is no vendor lock-in. You could even be your own broker if you set up your own server that talks to the servers hosting any media you’d like to consume. It would get rid of online advertising, but you have to pay out of pocket for server costs and content creation costs.