[quesera]

Interpreting Animats' question as concern for the user population, I think it's a valid one.

The new administration in the US is openly hostile, and a lot of damage could be done to peoples' lives if, say, the community was hacked and private email addresses (or other PII) was leaked.

And I also agree with you -- now's the time for those of us who can afford it, to fly our ally flags as loudly and proudly as possible.

OP: Please make sure your secure coding and operational security practices are excellent and meet the challenge here.

[mmooss]

> if, say, the community was hacked and private email addresses (or other PII) was leaked.

Or just basic ISP, or other provider, logging domains visited per user.

[comprambler]

Threat model this shit.

I would dead man switch the storage's Azure instance. Mayybe the whole thing. Mayybe shouldn't be on azure.

[comprambler]

Nm assumed RLS as a MS TLA. PGsql has it as well. Comment stands, watch data residency.

[t4t]

I am taking security very seriously. All sensitive rows are protected by RLS, and I have gone even further by adding random noise to all location data. Locations are locked down, but in the unfortunate event of a hack what would be leaked is location within a 5 or so mile range, not exact location.

If it is possible on Supabase I would like to eventually obscure emails and oauth info.

[alt227]

5 mile range is pretty serious, it narrows someones locations down to a single town in the entire world. Just dont store it at all and you're all good.

[mmooss]

You'd need just a little more data to find the individual.

[2muchcoffeeman]

Why even keep location data at all?

[t4t]

One of the main selling points of the app is that you can filter posts by distance, to facilitate people meeting and talking with their community.

[2muchcoffeeman]

So list a city?

[nyanpasu64]

I'm wondering if it's more or less safe (from doxxers attacking individual users, or the entire service being compromised) to share location with this app vs. Lex. In any case I chose not to share location yet, and don't know if Lex is any safer (they require location).

[_cenw]

email me if you need a code review

[etothepii]

Without wishing to appear overly snippy, this is how I would begin hacking such a site.

Offer to do a "code review".

[dang]

"Please respond to the strongest plausible interpretation of what someone says, not a weaker one that's easier to criticize. Assume good faith."

https://news.ycombinator.com/newsguidelines.html

[PaulHoule]

I got an offer of a "code review" like that once for an authentication system and never heard back; it was open source anyway so anybody could have downloaded it and found my rookie mistakes like

  signed_token = content + MD5(secret_key+content)

which doesn't stop anyone from appending to the content (might not have really been exploitable, but any honest review from somebody who knew more than me would have turned it up)

[_cenw]

> Without wishing to appear overly snippy

You failed.

[gowld]

[flagged]

[otterley]

That's not an observation. That's speculation.

[bigiain]

Fairly valid speculation, I my opinion.

If I were in the US, and particularly in one of the seriously intolerant red states, there's no way I'd want and of my details in their database.

I don't think it's catastrophising to consider there may well be very real risks to being openly trans in the US in the near future. Risks of not only blackhat 4chan hackers, but also from government and legal system attacks on sites like this.

[otterley]

There's nothing new about this, sad though it is. People, particularly insecure people, have tried to suppress minorities since the dawn of time, and they're constantly inventing new ways to do it.

[mmooss]

Interesting ... why can't I Vouch for this post?

[dang]

It's [flagged] but not [dead]. Past explanations:

https://news.ycombinator.com/item?id=39676944

https://news.ycombinator.com/item?id=38918548

[whalesalad]

this is the most insane thread I have ever seen on hn.

"no good deed goes unpunished" comes to mind