undefined | Better HN

0 pointssupermatt2y ago0 comments

> accesses a computer without authorization

They were authorized, as per the permissions that fizz gave users of the app on firebase. A group of users noticed that it was overly permissive and reported it to them.

> Leaving your door unlocked does not give burglars permission to burgle you.

This is more like giving your stuff away and then reporting it as theft.

0 comments

dahfizz2y ago

It's nothing like that. Fizz did not want these people making admin accounts on their server. That's the bottom line. They failed to prevent it (forgot to lock their door), but in no way did they actively "give their stuff away". No judge would see it that way.

nobodyandproud2y ago

> That's the bottom line. They failed to prevent it (forgot to lock their door) but in no way did they actively "give their stuff away"

A better analogy is that the bank forgot to lock their frontdoor, failed to install a security system, and failed to secure their vault.

That our laws have zero accountability for these “banks”, even for good faith tap on the shoulder, is the ongoing failure of information security and our legal system.

j / k navigate · click thread line to collapse