News for hackers. Stuff that matters.

A comment on Announcing the New AWS Secret Region. Parent comment

Re:Announcing the New AWS Secret Region by colechristensen on Monday November 20, 2017 @10:38PM (#15745334)
>I believe it's a platform provider's responsibility for the most part to secure data, and less so the responsibility of the developer or user

I would say that is going too far, or maybe I'd say it differently. If a certain problem becomes very frequent relative to it's severity, the problem is a design bug and not just user error. The provider isn't responsible for every mistake, but they are responsible for designing with mistakes in mind.

[ Parent | on HN ]
Re:Announcing the New AWS Secret Region by staticassertion on Tuesday November 21, 2017 @12:12AM (#15745734)
If your design allows insecure setups without users understanding the risks in full, I think that's on the providers and not the user. If the user understands the risks fully, then it's on the user.

I think we are way far away from users fully understanding the risks, and we're still mostly dealing with people not realizing they're vulnerable. So I put this primarily on the provider.

[ Parent | on HN ]