Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

I haven't asked A., but as I said, I suspect she was reinstalling the server from scratch, and hadn't yet gotten to the part where she restored the database from backups. So all login attempts were failing. I didn't yet realize there was a server problem, myself. I thought Element on my phone was failing and that I was misremembering the password when I tried to log in from the browser.

Generally, though, regardless of how it happened, from my perspective it's a security vulnerability if there's anything the server can send that will wipe data from the client. So the spec doesn't seem reasonable to me. I want to use a client that keeps my data safe from server malfunctions, whether accidental or intentional.



Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: