4 ms·
> How is it that he was able to do this? I suspect some Reddit users take Reddit a lot more seriously than is warranted, but I still find this sentiment more t
by inimino 10y ago
> How is it that he was able to do this?
I suspect some Reddit users take Reddit a lot more seriously than is warranted, but I still find this sentiment more than a bit odd.
What kind of architecture did you think they had where the CEO wouldn't be able to run some UPDATE statements against the live database? Were you expecting a system of three administrators with interlocking physical keys who all must be present in the flesh?
Did you think Reddit was put together by the people who write software for banks?
Is the principle of least privilege, rigorously and scrupulously applied, all the way up to and including the CEO, something that startup culture has somehow led you to expect?
- TheGrumpyBrit 10y agoI would certainly expect that any reasonably well managed company would have appropriate access controls in place, and yes, that includes the CEO not having direct access to a production database. You don't need to be a financial institution to observe basic security practices.