4 ms·
I would disagree. Backups could be maintained on a regular schedule, including full router backups. Others in charge of this could be given create and append a
by kefka 10y ago
I would disagree.
Backups could be maintained on a regular schedule, including full router backups. Others in charge of this could be given create and append access to the backup systems, but not delete.
Once you delineate split rights and controls, then you can mitigate the severity of these attacks. Yes, douchebag-router admin can still zero out the routers. But you can be in business in less than a day with those configs logged.
- atmosx 10y agoAnd who's going to design the backup scheme, the management? One more click to erase all backup servers, I mean since we're here... Point in case, as parent commentator said, it's not the kind of problem that you solve with technology.
- joenathan 10y agoDon't need to have the ability to delete, with create and append access one could also just corrupt all the backups.
- typetypetype 10y agoRight - going down for a day can be damaging enough for some companies. Not allowing one person to click the "erase" button in the first place should be the focus. How hard could it be to implement a system where two or more people have to issue a command before it runs?
- st3v3r 10y agoAll that just so you don't have to treat your employees like human beings?
- kefka 10y agoNot at all. If a human can do some damage, so can a script. Giving appropriate accounts permission so that no 1 account can destroy the whole system is just smart. But thanks for assuming I'm some inhumane business exec, or a VC.