5 ms·
Giving auditors complete access to people's personal profiles? That doesn't phase you at all?
by Crito 11y ago
Giving auditors complete access to people's personal profiles? That doesn't phase you at all?
- reagency 11y agoThere ar e ways to audit... Timestamps of account creations, IP block where signups and messages come from....
- halviti 11y agoAnyone competent who wanted to boost their numbers could just pay someone under the table to buy a bunch of vps's or vpn connections and fake all of this. You're just creating hoops, but you're not stopping anyone.
- harryh 11y agoThe way auditors have complete access to people's financial records?
- TallGuyShort 11y agoPeople don't want authorities having access to data on their sexual promiscuity the same way the government keeps tax records.
- fweespeech 11y agoGiven those personal profiles are effectively public to "millions" of users....eh?
- uptown 11y agoDo you seriously think there were controls in-place to prevent Ashley Madison developers from doing just-that? Auditors work with privileged information in order to provide assurances to third-parties that the audited entity is operating in a legitimate way. Sometimes they receive a sampling of data to spot-check things, while other times their review necessitates more-broad access. Both of these approaches necessitate some level of access to what would otherwise be considered confidential information, but audits are performed with the understanding that the firm conducting the audit has as-much to lose by compromising the data privacy of a client as the client. It makes no sense for a reputable auditor to expose the information they're analyzing because it would destroy their firm's reputation, and put them out of business.
- Crito 11y ago> Do you seriously think there were controls in-place to prevent Ashley Madison developers from doing just-that? No, but there should have been. Access to personal customer data should be strictly controlled, with access being granted only to those who need it for their work, and only for as long as they need it. I would never expect them to do that, but they should do that.