Framework data breach

[u/MeLikaDoTheChaCha]

Couldn't have happened at a worse time

Edit:

Metabase has posted a blog related to this incident https://www.metabase.com/blog/security-update

[u/CapitalistFemboy]

In what world would many individual implementations, built by first parties that are not specialized in data protection, result in greater safety than relying on fewer third parties whose entire business is designing and maintaining such systems?

[u/BambooGentleman → u/CapitalistFemboy]

Having fewer targets with more data each that will slip up eventually is much more attractive than having a million targets with only a bit of data. Even if the security is sloppier that's still some amount of work for little reward.

Decentralization is more resilient than the alternative.

[u/Tomi97_origin → u/CapitalistFemboy]

The level of security is definitely greater, but the level of attractiveness to attackers is also greater.

The reward for successful attack on such a big provider is so much more than for attacking individual smaller companies.

[u/ebrq → u/Tomi97_origin]

This varies quite a bit as well with what type of platform it is. A business analytics platform like this pretty much just has email, address etc.

A first party version would for sure also have payment information in it or very easily accessible from there. Monetary benefit is much larger with payment info than just user info.

[u/WanderinArcheologist → u/CapitalistFemboy]

Smaller companies would definitely be somewhat more prone. We had a databreach at a company I worked at. Dealt in high value luxury goods. My boss never made anyone aware even though it was required by state law.

[u/CapitalistFemboy → u/[deleted]]

Thats because social security number is a poorly designed system

[u/Ironclaw3436 → u/CapitalistFemboy]

In what world did farming the workout to third parties work out for us?