Comment on ICEBlock handled my vulnerability report in the worst possible way
x1gma@lemmy.world 1 day agoOn the other hand, detrimental reliance is a tort and if someone is relying on an app for a specific safety function, the app could be civilly liable if it fails it’s function in some way.
Yes, if the app would be any kind of official tool.
Imagine if you had this attitude about an insulin use tracker/calculator, that sometimes gave wildly wrong insulin dose numbers.
Yes, and that’s why regulations for those kinds of things exist, that prevent those things. There is no regulation for the ice tracker.
Maybe down the road, it’s decided that aiding and abetting ICE is a crime, and providing misinformation intentionally or unintentionally is a criminal act. App developer dude could be criminally liable if he knew or ought to have known he had vulnerabilities. You know, in your New Nuremberg trials that you are going to get sometime in the next decade or so.
If down the road a regulation would happen for, app developer dude would be forced to either comply or to stop operations.
Bane_Killgrind@lemmy.dbzer0.com 21 hours ago
Wouldn’t need so much regulation if things were just well reasoned and fit for purpose. Or if they would stop only pretending to be those.
x1gma@lemmy.world 13 hours ago
No matter how well reasoned, allegedly fit for purpose or how much something pretends to be it, we shouldn’t be trusting those promises, especially not from people we don’t know. That does not end well neither for the free candy van nor for cybersecurity. Trust like that has been responsible for a lot of attacks over varying vectors and for projects going wrong.
Bane_Killgrind@lemmy.dbzer0.com 10 hours ago
Well yeah, that just requires a consensus on what is trustworthy. There are some things that are trustworthy, and you need to have some way to identify that, if you are going to protect yourself.
But that just shifts the blame to the user, who is a non expert, and we don’t really have good ways to identify safe software products. There’s stuff like CSA for physical products. It’s short-sighted to say “well if you don’t know, use nothing”, because that’s not going to happen.