3 ms·
They do, but there are limitations: 1. Most DOps, support staff, etc access user information of 100s of people per day. 2. Overzealous SQL queries are often w
by HappyTypist 10y ago
They do, but there are limitations:
1. Most DOps, support staff, etc access user information of 100s of people per day.
2. Overzealous SQL queries are often written and are not questioned; such as complete driver/rider exports of a particular city.
3. Some tools, like Heaven, and many experimental tools have no access logging.
4. There is a permission that allows you to remove access logs.
5. Spot checks are unheard of.
6. Even direct queries for names like 'Barack Obama', 'Taylor Swift' can be easily justified as 'investigating fraud', which is part of a DOp's job role.
- walshemj 10y agoif you did the same at the telecom company I used to work at if you looked up say the queens private number you would hope that MI5 or the special branch got to you before our internal security guys did. People who had wide access to data (team leads) had to have PV clearance in us terms that's the same as a CIA Officer would have.