News for hackers. Stuff that matters.

A comment on 70TB of Parler users’ messages, videos, and posts leaked by security researchers. Parent comment

Re:70TB of Parler users’ messages, videos, and posts leaked ... by raverbashing on Monday January 11, 2021 @10:07AM (#25729817)
The old age question with fail-closed is then not locking yourself out when things go wrong

Everything has/should have a "break window" escape, and yes, that's a security weakness, but I don't see many alternatives to that.

[ Parent | on HN ]
Re:70TB of Parler users’ messages, videos, and posts leaked ... by jakelazaroff on Monday January 11, 2021 @10:37AM (#25730305)
The platform operator should have such a mechanism, yes. Not randos on the Internet the moment a critical dependency fails.
[ Parent | on HN ]
Re:70TB of Parler users’ messages, videos, and posts leaked ... by thinkharderdev on Monday January 11, 2021 @10:44AM (#25730401)
When you own the platform and source code, then you always have a "break window" escape of updating the code. You can also have it fail open only when requests are coming from the internal network, or have a fail-safe authentication mechanism that allows authentication with a super-admin password that can be used "in case of emergencies."
[ Parent | on HN ]