derek

joined 3 months ago
[–] derek@infosec.pub 3 points 1 month ago

This is admittedly a bit pedantic but it's not that the risk doesn't exist (there may be quite a lot to gain from having your info). It's because the risk is quite low and the benefit is worth the favorable gamble. Not dissimilar to discussing deeply personal health details with medical professionals. Help begins with trust.

There's an implicit trust (and often an explicit and enforceable legal agreement in professional contexts (trust, but verify)) between sys admins and troubleshooters. Good admins want quiet happy systems and good devs want to squash bugs. If the dev also dons a black hat occasionally they'd be idiotic to shit where they eat. Not many idiots are part of teams that build things lots of people use.

edit: ope replied to the wrong comment

[–] derek@infosec.pub 3 points 2 months ago (1 children)

I'm excited to see they're going fully open source. Looks like the last steps to making the sync server self-hostable are in the works. Do you use their paid service? If so: any complaints or caveats?