Hacker News new | past | comments | ask | show | jobs | submit login

> It's a bad system and you should feel bad for using it.

What "system" is bad and why? The poster made several arguments - which one of them are you rebutting?

The core idea that "you should have to pay more money for more features" makes sense from a basic economics standpoint (regardless of other rationalizations).

> I wonder if someone avoided perfectly reasonable SSO protections because of this tax

I don't know how much sense this speculation makes. SSO is complex to set up - without data, you could just as easily argue that misconfigured SSO makes breaches more likely, instead of less.

Plus, from a more practical standpoint, if you're frustrated about the never-ending stream of breaches (as I am), then it'd be better to push for laws that make the end result (personal data leaked) directly illegal with steep fines. There's too many different "upstream" problems (lack of SSO, default database credentials, buffer overflow in web application, misconfigured authorization system in webapp, etc.) for the strategy of "wage war against them one at a time" to be productive.




Join us for AI Startup School this June 16-17 in San Francisco!

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: