3 ms·

How would you propose that a root level administrator of a server, for a site running code he original wrote, be prevented from modifying the content of that si

How would you propose that a root level administrator of a server, for a site running code he original wrote, be prevented from modifying the content of that site?

samstave 10y ago
That wasn't quite what I meant: 1. the actual reddit account /u/spez would presumably be just like any other account (meaning no god-mode, where he can edit shit) - that should be compartmentalized to system level accounts for cassandra, mysql etc... such that /u/spez cannot (via the web-account login) access an option to modify content thusly. The reason for this is to assume that /u/spez's account is prolly being attacked by brute force continuously. 2. we should assume that their DB practices, hosted on AWS, have both logging and alerts such that there should be a log of any DB statements submitted are logged. 3. that logged events stat who did what when 4. It's actually far more common to not have a CEO's account having root access to everything -- this is why you create a company. We are far more advanced than that. While Zuck may have "authority" to access any single system that FB has, I doubt he knows every single password - and that he would rely on his officers and teams to access/modify anything (given their current maturity level asa company) I'd bet my life that if you put a gun to Tim Cook's head - he would not be able to login and gain access and them modify your icloud account.
- SwellJoe 10y ago
  1 - I don't think he used his /u/spez account on reddit to make this change. I think he hit the lower level parts of the system. I can't imagine he wanted to spend hours manually editing things. 2 - How do we know it wasn't logged? I assume it was. 3 - Same as above. I assume it would have been traceable had that been necessary. But, Steve posted about it. No need for spelunking in the logs. 4 - Tim Cook didn't/couldn't build iCloud from the ground up. Zuck hasn't been a primary coder on facebook in years, and nearly always had a lot of help. Steve built almost all of reddit in the beginning, and even now, seems to still be involved in the code.

How would you propose that a root level administrator of a server, for a site running code he original wrote, be prevented from modifying the content of that site?

samstave 10y ago

That wasn't quite what I meant: 1. the actual reddit account /u/spez would presumably be just like any other account (meaning no god-mode, where he can edit shit) - that should be compartmentalized to system level accounts for cassandra, mysql etc... such that /u/spez cannot (via the web-account login) access an option to modify content thusly. The reason for this is to assume that /u/spez's account is prolly being attacked by brute force continuously. 2. we should assume that their DB practices, hosted on AWS, have both logging and alerts such that there should be a log of any DB statements submitted are logged. 3. that logged events stat who did what when 4. It's actually far more common to not have a CEO's account having root access to everything -- this is why you create a company. We are far more advanced than that. While Zuck may have "authority" to access any single system that FB has, I doubt he knows every single password - and that he would rely on his officers and teams to access/modify anything (given their current maturity level asa company) I'd bet my life that if you put a gun to Tim Cook's head - he would not be able to login and gain access and them modify your icloud account.

SwellJoe 10y ago
1 - I don't think he used his /u/spez account on reddit to make this change. I think he hit the lower level parts of the system. I can't imagine he wanted to spend hours manually editing things. 2 - How do we know it wasn't logged? I assume it was. 3 - Same as above. I assume it would have been traceable had that been necessary. But, Steve posted about it. No need for spelunking in the logs. 4 - Tim Cook didn't/couldn't build iCloud from the ground up. Zuck hasn't been a primary coder on facebook in years, and nearly always had a lot of help. Steve built almost all of reddit in the beginning, and even now, seems to still be involved in the code.