News for hackers. Stuff that matters.

A comment on X0.at: upload files from cURL. Parent comment

Re:X0.at: upload files from cURL by PeterisP on Monday March 15, 2021 @05:28PM (#26469331)
Automation; the bare minimum would be to scan for known child sexual abuse material hashes - if you're not doing that, then opening up anonymous uploads is very risky, as for CSAM (unlike most other things) you may be personally liable even if it's distributed there without your knowledge. Cloudfare's CSAM scanning tool is one option that may help, there are other options.

You can't rely on the good faith of users, if your service is easily usable for crime, it will be used for it.

[ Parent | on HN ]
Re:X0.at: upload files from cURL by MandieD on Tuesday March 16, 2021 @04:34AM (#26474246)
"You can't rely on the good faith of users; if your service is easily usable for crime, it will be used for it." - should be on every developer's login screen
[ Parent | on HN ]
Re:X0.at: upload files from cURL by mcculley on Tuesday March 16, 2021 @02:55PM (#26481248)
And every developer needs to explain this to clients.

I had a client wanting to defer identity validation on a two-sided market system. I had to explain how it would be used for money laundering. It had never occurred to the client.

[ Parent | on HN ]