Hacker News Reader

Dark side of API-based access to everything on SaaS where companies have no control.

I can’t guard the front door effectively.

Nor, I can easily guard the back doors.

Will data breaches like these: AT&T, Ticketmaster, and now Disney—-a nail in Security coffins for SaaS?

lol. no. besides which all of these hacks would have been prevented by simple, well established controls (eg. MFA everywhere, not hoarding every scrap of customer data and internal comms).

so all of those basics are going to magically happen when you move your data on-prem?

Also the above-mentioned SaaS customers will face no negative consequences from investors or otherwise, just some bad press that will be forgotten quickly and amount to nothing. It's great if your SaaS vendor gets hacked and not you: it spreads blame around in the eyes of the public, and makes it harder for legislators, regulators, and plucky DAs to come after you.

Reply on news.ycombinator.com