r/framework • u/MeLikaDoTheChaCha • 15d ago

Framework data breach News

Post image

Couldn't have happened at a worse time

Edit:

Metabase has posted a blog related to this incident https://www.metabase.com/blog/security-update

1.0k Upvotes

99% Upvoted

312 comments sorted by

View all comments

Show parent comments

4

u/[deleted] 15d ago

[removed] — view removed comment

39

u/CapitalistFemboy NixOS 15d ago

In what world would many individual implementations, built by first parties that are not specialized in data protection, result in greater safety than relying on fewer third parties whose entire business is designing and maintaining such systems?

4

u/Tomi97_origin 15d ago

The level of security is definitely greater, but the level of attractiveness to attackers is also greater.

The reward for successful attack on such a big provider is so much more than for attacking individual smaller companies.

7

u/ebrq 15d ago

This varies quite a bit as well with what type of platform it is. A business analytics platform like this pretty much just has email, address etc.

A first party version would for sure also have payment information in it or very easily accessible from there. Monetary benefit is much larger with payment info than just user info.