4 ms·
As someone who works as an identity and access governance consultant and developer, I endorse this article. I mean, there's very little you do about this parti
by lagadu 10y ago
As someone who works as an identity and access governance consultant and developer, I endorse this article.
I mean, there's very little you do about this particular scenario other than some small mitigations (at the end of the day you'll have to trust someone with something) but it's genuinely amazing how vulnerable the processes inside large, multi-million companies are to any internal attacker.
- atmosx 10y ago> I mean, there's very little you do about this particular scenario other than some small mitigations (at the end of the day you'll have to trust someone with something) but it's genuinely amazing how vulnerable the processes inside large, multi-million companies are to any internal attacker. Maybe the scenario is too rare for companies to care, so when it happens they just accept the cost of once in a while instead of setting up additional security policies which will turn procedures cumbersome.
- coredog64 10y agoMaybe you're working at different firms than I am, but the typical reaction I see from management is that there is no problem that can't be solved with yet another layer of process.
- droopyEyelids 10y agoIt's not actually amazing if you think about any aspect of human life and consider how it all hinges on continued cooperation, good will, and concern for your own future. What stops bad person in finance from making a huge wire transfer to a hidden account? What stops the CEO from plundering the company? What stops the average driver from taking out a bunch of pedestrians? What stops a doctor from purposefully poisoning one of her patients? What stops a parent from abusing their children? Only good will and care for the future. And any system in place to stop that stuff from ever happening would cost more than the benefit.