mryijum
Joined 6 years ago
Karma
47
Submissions
8
Member since
Aug 9
Joined 6 years ago
Earlier today, we detected evidence of a security incident on AO3. We are still in the early stages of response to this security incident and determining its scope. AO3 will remain down while we continue investigating and addressing what has been found so far. However, we want to make some things clear:
First, no AO3 data has been deleted. All your works, bookmarks, kudos, etc., are safe.
Second, while we currently don't believe that the user database was stolen, we are also unable to rule it out. The AO3 database contains account information that may include your username, email address, IP address, and a hashed version of your password.
We use industry-standard techniques for storing passwords in a scrambled form that cannot easily be reversed. Even so, no hashing method can fully protect a weak or reused password from being cracked. As a precaution, we recommend that you change your passwords on any other sites where you use the same password as on AO3.
AO3 does not collect real names, so none could be exposed. Additionally, our donor information is held in an entirely separate system and is never linked to AO3, so that data has also not been exposed.
We will update everyone as our investigation continues; we may be unable to respond to individual inquiries from users. Please keep an eye on our official outlets for updates. Our next update will be posted when we have further information available.
Our current expectation is that AO3 will be down for a minimum of two weeks; however, it could take up to four weeks. During that time, we may be able to bring the site back up in a degraded state, meaning that not all features will be available and/or the site may be read-only. If we are able to do that, please be aware that we might have to bring the site back down unexpectedly as part of our recovery efforts. We will keep you in the loop for any developmentsIt'll be interesting to see the postmortem. I don't know much about their infrastructure.
is this a contrarian impulse or an anti-contrarian impulse?
In fact, it sort of seems like this sentence should wreck the effort to demonstrate the difficulty of content moderation. I would think that a significant amount of the difficulty comes from instances where moderators feel that interactions between different rules mean they should allow violations of particular rules in certain situations.
Another way of thinking about it is that it's really all these little bits together that make the situation seem so bleak. That level of aggressiveness regarding AI, the thing about not having enough velocity, the fact that it seems like a workplace where people are afraid to speak up--all that paints a picture that is basically the opposite of what I want out of the service. The whole brand, as I understood it, was that Proton was focused on security and privacy. I don't think the workplace described in that article really matches up to that brand.
Glad I hadn't really migrated mail to Proton yet, so now I can figure something else out. What's wild is a week ago I was actually thinking about expanding my subscription to their other products too.