davej
Joined 16 years ago
Joined 16 years ago
The argument that they’re making is that if there is a catastrophic mistake then there may not be a “kingdom come”.
I don’t know enough to evaluate if it’s a genuinely held belief or not, but that’s the argument being made by many scientists and engineers at the labs.
If you compare tokens/kWh efficiency then my math has Mac Studio being about 1.5x more efficient.
One evening my girlfriend was using a hair straightener in my bedroom, it tripped the central fuse and turned off the electricity. I told my GF that I would buy her a new hair straightener because this one isn't safe.
Now every time my housemate started blaring music at 3AM then I just needed to plug in the hair straightener. It only took 3 or 4 attempts for me to Pavlov my housemate into not playing loud music at 3am. :-)
Point taken on enterprise language. I think we did a decent job of keeping it readable in our disclosure write-up but you’re 100% right, my comment above could have been written much more plainly.
Our disclosure write-up: https://www.todesktop.com/blog/posts/security-incident-at-to...
Yes, we re-architected our build container as part of remediation efforts, it was quite significant.
This vulnerability was genuinely embarrassing, and I'm sorry we let it happen. After thorough internal and third-party audits, we've fundamentally restructured our security practices to ensure this scenario can't recur. Full details are covered in the linked write-up. Special thanks to Eva for responsibly reporting this.
Founder of ToDesktop: https://www.todesktop.com
dave[@]todesktop.com
[ my public key: https://keybase.io/davej; my proof: https://keybase.io/davej/sigs/FM5YHbUxtgUBcbAxTsHEUoJ99YV2rd9JbFNBjoZ3JBw ]