[pavel_lishin]

> Adafruit accessed only information that Flux’s own systems made publicly available through a server misconfiguration

Does anyone have some more context about what happened here? An uncharitable analogy might be that I misconfigured my front door by not locking it, which doesn't give someone the right to walk in and look around - but I have no idea what Adafruit is specifically being accused of doing.

[mindslight]

It often does when your front door is otherwise a business storefront. Without knowing the specifics of what was accessed, analogies really aren't helpful. And there seems to be zero context here, so this strikes me as the most plausible scenario: https://news.ycombinator.com/item?id=48368635

(I agree that Adafruit's statement itself is worded pretty terribly!)

[dghlsakjg]

what about if I knock on the door (send an http request), and someone comes to it and hands me a bunch of documents (sends an http response with data).

[gfaster]

Whenever something like this comes up, I always think back to the excellent paper, "The Structure and Legal Interpretation of Computer Programs." I don't have a specific answer, but I like to review this paper whenever a question like this is posed.

https://papers.ssrn.com/sol3/papers.cfm?abstract_id=4445484

[russdill]

It certainly doesn't look like they've publicly released anything. My guess is they found a problem and have been following reasonable responsible disclosure guidelines. However, the 90 days (or whatever time limit was given) is likely expiring and to head off publication, flux.ai is getting lawyers involved.

This is all 100% speculation, just based on checking the archive sites and search sites historical data and finding nothing.

[russdill]

As their blog update an suit reveal, this is almost exactly the case. Plus more.

[mlhpdx]

If you leave your door wide open folks on the sidewalk can take pictures and write about what they see all day long.

[UqWBcuFx6NV4r]

That isn’t legal in most jurisdictions either. You’re not a lawyer.

[somewhatgoated]

What isn’t legal? Cant really square your comment with GP comment.

[pavel_lishin]

That's rather my point.

And yep, I'm not a lawyer - and even if I were, I couldn't begin to speculate about this post because it says so little.