This is why police unions are starting to talk about shutting down Flock: because it's a hazard to police. Because the normalized abuse of power that pervades policing is actually visible here.
I agree that it is to some extent about optics for the cops, but access controls and properly scoped authorization are always problems everywhere in software.
That's not to say we should let any of this slide, but that we should realize it is time we take this aspect of security more seriously. We are living in that future now. Yes, your shitty janky auth scheme is causing real problems right now and yes it sometimes is life or death.
We're missing an entire category of software that manages permissions in more dynamic ways... Meanwhile, about a third of devs out there don't even know or care about the difference between authn and authz.
LMAO
https://news.ycombinator.com/item?id=49699308
That's not to say we should let any of this slide, but that we should realize it is time we take this aspect of security more seriously. We are living in that future now. Yes, your shitty janky auth scheme is causing real problems right now and yes it sometimes is life or death.
We're missing an entire category of software that manages permissions in more dynamic ways... Meanwhile, about a third of devs out there don't even know or care about the difference between authn and authz.