alt Hacker NewsI believe that Muse security is about as good as any other large cloud environment. In the long run maybe all of them will eventually be hacked but so far my other Meta accounts have been 100% secure. So I'll take my chances with Muse because it saves me time and allows me to get more done.
Those other issues, while perhaps examples of bad corporate behavior, aren't really security lapses per se.
Replies
> my other Meta accounts have been 100% secure.
The word “my” is doing some work here. Maybe you personally have been lucky, but Meta has had quite a few data breaches.
https://breachhistory.com/blog/facebook-data-breaches-full-t...
Meta has a long history of treating their user’s data recklessly. Cambridge Analytica being a prominent example.
They’ve also had a long history of using shady/deceptive practices to gather data, such as Onavo.
Is their internal security up to par with other cloud providers? Maybe. Security from them? Definitely not to be trusted.
(Former employee)
It's not about cloud environments. Basically every ToS ever forbids you from disclosing your password to someone else or another entity. Even when you use a cloud-synced password manager, the whole security posture relies on that data being encrypted the entire time and never read in the cloud.
The worst security faux pas of companies is storing user passwords - because the most common source of account breaches is via credential stuffing, where they get hacked, have their user base's passwords stolen and tried on other websites. The remedy being... not to store passwords, only salted, secure hashes.
Muse sounds like a disaster - your credentials for other sites are floating around on their servers, with the capability of being decrypted. Maybe if sites decided to offer a form of auth tied to the agent that could be revoked in bulk in the event of a breach it might be a ok, but this is crazy.