Readit News logoReadit News
ShadowRegent commented on Apple's Claimed Private Data Flows Pass Through Amazon Infrastructure   gist.github.com/JGoyd/e5f... · Posted by u/sandbox_escape
sandbox_escape · 3 months ago
This means trusting AWS’s privacy policies too, which users aren’t always aware of or expecting when Apple promises full control. It’s about honest transparency.

We pay a premium for Apple's privacy restrictions and then end up being tricked to rely on Amazon's. It is false advertisement to say the least....

ShadowRegent · 3 months ago
When Apple says your data doesn't leave their servers, that doesn't mean those servers have to be in their own datacenters or that Apple doesn't have other vendors that help them deliver their service. It also doesn't mean those companies have access to your unencrypted data. That data also, by necessity, likely traverses other networks in encrypted form on its way between you and Apple.
ShadowRegent commented on Upcoming end of support for Nest Learning Thermostats (first and 2nd gen)   support.google.com/google... · Posted by u/ShadowRegent
dekhn · 8 months ago
these products are 10 years old, and were buggy and broken (by design) when initially launched.
ShadowRegent · 8 months ago
They're old, but it's really disappointing to see them end even basic temperature control (except physically on the device).
ShadowRegent commented on Bricked iPhone 16 Can Be Restored Wirelessly Using Another iPhone   macrumors.com/2024/09/18/... · Posted by u/impish9208
teruakohatu · a year ago
The latest AirPods have usb-c, with the higher tier also including wireless charging. If there was ever a device category to remove usb-c it would be AirPods (which would still be a terrible idea)
ShadowRegent · a year ago
I'm not so sure. One of the potential benefits of removing ports from the iPhone is improved water resistance (personally, I'd still rather have the port). I don't foresee going swimming with my AirPods case.
ShadowRegent commented on Post Mortem on Cloudflare Control Plane and Analytics Outage   blog.cloudflare.com/post-... · Posted by u/eastdakota
ImPostingOnHN · 2 years ago
I prefer to have their informed speculation here.

Has Flexential provided a similarly detailed, public root cause analysis? If so, maybe we can refer to it. If not, how do you expect us to read it?

ShadowRegent · 2 years ago
It’s only been a couple of business days, and it’s likely that they themselves will need root cause from equipment vendors (and perhaps information from the utility) to fully explain what happened. Perhaps they won’t publish anything, but at least give them an opportunity before trying to do it for them.
ShadowRegent commented on Post Mortem on Cloudflare Control Plane and Analytics Outage   blog.cloudflare.com/post-... · Posted by u/eastdakota
logifail · 2 years ago
> I also think that for security purposes they should leave out extraneous detail

Disagree completely, it's the frank detail that makes me trust their story.

ShadowRegent · 2 years ago
Maybe, but I think that their "Informed Speculation" section was probably unnecessary. They may or may not be correct, but give Flexential an opportunity to share what actually happened rather than openly guessing on what might have happened. Instead, state the facts you know and move onto your response and lessons learned.
ShadowRegent commented on Post Mortem on Cloudflare Control Plane and Analytics Outage   blog.cloudflare.com/post-... · Posted by u/eastdakota
ShadowRegent · 2 years ago
Interesting choice to spend the bulk of the article publicly shifting blame to a vendor by name and speculating on their root cause. Also an interesting choice to publicly call out that you're a whale in the facility and include an electrical diagram clearly marked Confidential by your vendor in the postmortem.

Honestly, this is rather unprofessional. I understand and support explaining what triggered the event and giving a bit of context, but the focus on your postmortem needs to be on your incident, not your vendor's.

Clearly, a lot went wrong and Flexential needs to do their own postmortem, but Cloudflare doesn't need to make guesses and do it for them, much less publicly.

ShadowRegent commented on Everything authenticated by Microsoft is tainted   graz.social/@publicvoit/1... · Posted by u/ColinWright
Muromec · 2 years ago
The worst part of the story to me is —- those were not even the right keys, those were something issued to a client and scoped, but scoping check was broken. It’s unbelievably bad all around
ShadowRegent · 2 years ago
Close, but not quite. The keys were for consumer Microsoft accounts, but accepted for organization accounts as well.

u/ShadowRegent

KarmaCake day147February 23, 2023View Original