I hear you, but there’s no reason to be angry.

When I first learned of the issue, my first thought was, “Hey our update policy doesn’t pull the latest sensor to production servers.” After a little more research I came to the same conclusion you did, aside from disconnecting from the internet there’s nothing we really could have done.

There will always be armchair quarterbacks, use this as an opportunity to teach, life’s too short to be upset about such things.

Let me tell you about my mother

Crowdshite haha gotem

sungloc.utus

What about this scenario:

• you keep your main garage door, side doors, and windows locked
• provide a key to anyone who wants to borrow your lawnmower or whatever
• someone discovers a window you mistakenly left unlocked and starts using it to take stuff without using a key

Would this be considered breaking in? Probably. Here is where the analogy breaks down; if I were to leave the front door of my house unlocked, even if there’s a welcome mat outside, anyone who enters without my knowledge or consent can be charged with breaking and entering (yes, even though no actual breaking is involved).

The interesting thing with public APIs is that there are generally terms and conditions associated with creating an account and acquiring a key, though if you are hitting an unauthenticated endpoint you technically never agreed to them. In this particular case with Authy, it would probably be argued that the intent was to acquire data by exploiting a vulnerability in the custodian’s system and use it for nefarious purposes or profit. I’d call it a hack.

To build on you analogy: if you left your garage door open and people came in and started taking your things, is that not stealing?

They could bundle in my idea of having a telephone in your house, not a cell phone more like a land phone

Sorry

• • • ノ( ゜-゜ノ)

You know what they call alternative medicine when it works? Medicine.