But only accepting one possible alternative is an extreme. You can build in safeguards… but if they’re too rigorous you will drive away potential users. Much like with freedom and security, you need to middle ground between accessibility and defensibility.
No one talks about only one possible alternative, but it is often not immediately obvious to laypersons why a defense mechanism is vital to have and can not be made a middle ground. Like for example there is no way to weaken end to end encryption a little bit to scan for CSAM, without breaking it entirely.
If there’s only ever one avenue of attack, sure. Your example posits that encryption is the only security layer that exists, which is laughable. Most security breaches happen at the personnel level, not the technical one.
A site does not “become facebook” just because it’s not 100% decentralized from every other possible service. Countless other factors go into it. Not the least of which is the nature of the people running it. If you run a service, and make it nigh impossible for a general public (your main market) to use because you fear it will become compromised, you are basically saying that you will compromise it otherwise, and probably shouldn’t be running that service.
But only accepting one possible alternative is an extreme. You can build in safeguards… but if they’re too rigorous you will drive away potential users. Much like with freedom and security, you need to middle ground between accessibility and defensibility.
No one talks about only one possible alternative, but it is often not immediately obvious to laypersons why a defense mechanism is vital to have and can not be made a middle ground. Like for example there is no way to weaken end to end encryption a little bit to scan for CSAM, without breaking it entirely.
If there’s only ever one avenue of attack, sure. Your example posits that encryption is the only security layer that exists, which is laughable. Most security breaches happen at the personnel level, not the technical one.
A site does not “become facebook” just because it’s not 100% decentralized from every other possible service. Countless other factors go into it. Not the least of which is the nature of the people running it. If you run a service, and make it nigh impossible for a general public (your main market) to use because you fear it will become compromised, you are basically saying that you will compromise it otherwise, and probably shouldn’t be running that service.