3 ms·
I mean... it should be, but every business I've ever worked at has had difficulty cleaving between "the kind of access that developers need in order to do thei
by aetherson 10y ago
I mean... it should be, but every business I've ever worked at has had difficulty cleaving between "the kind of access that developers need in order to do their jobs" and "the kind of access that would be abusable." It's legitimately difficult to do, and there's no way to make your system proof against insider abuse without serious trade-offs.
The purported "God-mode" that Uber had years ago, and showed off at parties, was a real problem with their culture. The ability of devs to get read access to some production data is much less of a huge deal.
- eli_gottlieb 10y ago> It's legitimately difficult to do, and there's no way to make your system proof against insider abuse without serious trade-offs. I know homomorphic encryption is very new, but deploying it for privacy applications like these is a Good Idea.
- aetherson 10y agoWhile I admit that I have literally zero experience with homomorphic encryption, I suspect that even after whatever deployment costs there would be, the burden on your ability to do things like investigate bugs, much less repair data if needed, would be non-trivial.