And as always, the majority response to this will absolutely be something along the lines of “I support writers but you can fuck right off if you expect me to inconvenience myself in the slightest most superficial way in solidarity with you because actually having to modify my behavior in the simplest way is where I draw the line.”
Trusting your security to Google is literally like trusting a fox to guard your hen house.
This video from a security researcher says that pretty much every software that uses WebP was affected though, and once the issue was discovered, Google made commits in their own codebase to “fix” it. Which suggests it’s an issue with the upstream source code that Google provided to everyone else.
More expensive than the building itself below a certain size
It’s something that literally every dev has done at some point before they knew better.
If you’re working for a multinational tech company handling sensitive user data and still make this mistake, then you are being malicious in your incompetence. This is something that would cause you to lose a significant amount of marks on a first year college programming project, let alone a production system used by literally billions of people.
that logged unencrypted password data
Why the fuck would you need to log a password ever? This is absolutely malice and not incompetence.
Hanlon’s Razor revised: Never attribute to malice what can be attributed to incompetence, except where there is an established pattern of malice.
Does anyone remember an article/interview a while back where Mark Fuckerberg shamelessly admitted that he chose not to hash passwords in the original Facebook codebase specifically because he wanted to be able to log into his users’ other accounts that use the same password? I swear I remember reading something like this but now I can’t find it.
Same reason Siemens, Volkswagen, Bayer, and many more, including a ton of American ones were onboard with the Holocaust.
Genocide is good for business.
Anything that was designed be exploited was designed that way for a reason. You think Intel isn’t aware of the security issues with how they designed their CPUs?
“Bro full self driving is 5 years away bro trust me bro”