Re:DigitalOcean leaks customer data between VMs
by jlawer on Monday December 30, 2013 @12:58AM
(#6983268)
I completely agree for the UI. For the API I think it is completely fine to have it not as default (In fact I would argue having a boolean controlling an optional action default to false for an API is the most correct action).
[ Parent
| on HN ]
Re:DigitalOcean leaks customer data between VMs
by nitrogen on Monday December 30, 2013 @02:02AM
(#6983458)
In this case one must balance the right API choice with the right security choice. Security wins every time, or at least it should, so the default should be wiping. If one would insist on having API booleans default to false, just change the input polarity (e.g. rename "wipe_disk" to "skip_wipe").