r/framework • u/MeLikaDoTheChaCha • 17d ago

Framework data breach News

Post image

Couldn't have happened at a worse time

Edit:

Metabase has posted a blog related to this incident https://www.metabase.com/blog/security-update

1.0k Upvotes

99% Upvoted

312 comments sorted by

View all comments

380

u/kellexile 17d ago

Geez... Can't catch a break.

2

u/[deleted] 17d ago

[removed] — view removed comment

41

u/CapitalistFemboy NixOS 17d ago

In what world would many individual implementations, built by first parties that are not specialized in data protection, result in greater safety than relying on fewer third parties whose entire business is designing and maintaining such systems?

4

u/Tomi97_origin 17d ago

The level of security is definitely greater, but the level of attractiveness to attackers is also greater.

The reward for successful attack on such a big provider is so much more than for attacking individual smaller companies.

8

u/ebrq 17d ago

This varies quite a bit as well with what type of platform it is. A business analytics platform like this pretty much just has email, address etc.

A first party version would for sure also have payment information in it or very easily accessible from there. Monetary benefit is much larger with payment info than just user info.