News for hackers. Stuff that matters.

A comment on You can't leak users' data if you don't hold it. Parent comment

Re:You can't leak users' data if you don't hold it by photonthug on Thursday March 28, 2024 @07:54PM (#39858943)
Is there any kind of legal promise that could be made and not rescinded by the board, not swept away by mergers and acquisitions? I assume not but that’s almost what is needed here more than a software architecture fix which, no matter how well designed, is only as stable as the whims of internal stakeholders.
[ Parent | on HN ]
Re:You can't leak users' data if you don't hold it by filleduchaos on Thursday March 28, 2024 @09:13PM (#39859498)
Legal promises don't enforce themselves.
[ Parent | on HN ]
Re:You can't leak users' data if you don't hold it by travisjungroth on Thursday March 28, 2024 @09:49PM (#39859716)
I think you could make the alerting louder. Hire an independent auditing firm and create some contract around what to do if they fail.

A closed source client is fundamentally incompatible with the claims they want to make.

[ Parent | on HN ]