<story><title>Reddit Confirms It Was Hacked–Recommends Users Set Up 2FA</title><url>https://www.forbes.com/sites/daveywinder/2023/02/10/reddit-confirms-it-was-hacked-recommends-users-set-up-2fa/</url></story><parent_chain><item><author>boppo1</author><text>Reddit is a shady company. Doing everything they can on the browser experience including interrupting me while I&amp;#x27;m typing to try to shunt me over to the app is shady. I don&amp;#x27;t want the app. I have clicked &amp;#x27;continue in browser&amp;#x27; at least 200 times. My preference ought to be clear and recorded by now.&lt;p&gt;I&amp;#x27;d stop visiting altogether if I didn&amp;#x27;t have a general problem with compulsive browsing.</text></item><item><author>remus</author><text>I think this is overly pessimistic. While there&amp;#x27;s definitely shady companies out there who will say this while having very poor security practices, it&amp;#x27;s tricky demonstrating that something didn&amp;#x27;t happen.&lt;p&gt;Say you had detailed audit logs for example. What happens if there&amp;#x27;s a subtle bug in those systems that allowed the hacker to proceed without logs being recorded?</text></item><item><author>pgrote</author><text>&amp;gt;Ah the classic PR blur. Could mean anything from &amp;quot;all good&amp;quot; to &amp;quot;we don&amp;#x27;t log - ignorance is bliss&amp;quot;.&lt;p&gt;After what lastpass did I cannot trust any self reporting.</text></item><item><author>Havoc</author><text>&amp;gt;Reddit also stated that there was no evidence the systems used to run Reddit itself and store the majority of data, the primary production systems in other words, was breached.&lt;p&gt;Ah the classic PR blur. Could mean anything from &amp;quot;all good&amp;quot; to &amp;quot;we don&amp;#x27;t log - ignorance is bliss&amp;quot;.</text></item></parent_chain><comment><author>fragmede</author><text>Reddit pushing their app so hard annoys the hell out of me too, but what are they doing that qualifies as &amp;quot;shady&amp;quot;?</text></comment>
<story><title>Reddit Confirms It Was Hacked–Recommends Users Set Up 2FA</title><url>https://www.forbes.com/sites/daveywinder/2023/02/10/reddit-confirms-it-was-hacked-recommends-users-set-up-2fa/</url></story><parent_chain><item><author>boppo1</author><text>Reddit is a shady company. Doing everything they can on the browser experience including interrupting me while I&amp;#x27;m typing to try to shunt me over to the app is shady. I don&amp;#x27;t want the app. I have clicked &amp;#x27;continue in browser&amp;#x27; at least 200 times. My preference ought to be clear and recorded by now.&lt;p&gt;I&amp;#x27;d stop visiting altogether if I didn&amp;#x27;t have a general problem with compulsive browsing.</text></item><item><author>remus</author><text>I think this is overly pessimistic. While there&amp;#x27;s definitely shady companies out there who will say this while having very poor security practices, it&amp;#x27;s tricky demonstrating that something didn&amp;#x27;t happen.&lt;p&gt;Say you had detailed audit logs for example. What happens if there&amp;#x27;s a subtle bug in those systems that allowed the hacker to proceed without logs being recorded?</text></item><item><author>pgrote</author><text>&amp;gt;Ah the classic PR blur. Could mean anything from &amp;quot;all good&amp;quot; to &amp;quot;we don&amp;#x27;t log - ignorance is bliss&amp;quot;.&lt;p&gt;After what lastpass did I cannot trust any self reporting.</text></item><item><author>Havoc</author><text>&amp;gt;Reddit also stated that there was no evidence the systems used to run Reddit itself and store the majority of data, the primary production systems in other words, was breached.&lt;p&gt;Ah the classic PR blur. Could mean anything from &amp;quot;all good&amp;quot; to &amp;quot;we don&amp;#x27;t log - ignorance is bliss&amp;quot;.</text></item></parent_chain><comment><author>throwaway2056</author><text>Why use reddit&amp;#x27;s official app? There are several decent opensource apps. (BTW, you can use libredd.it to just read-only reddit)</text></comment>