4 ms·
Just a clarification that I posted here: By "public github" I meant code on the internet (from the bank intranet) and accessible to anyone in the consulting co
by AussieOdyssey 10y ago
Just a clarification that I posted here:
By "public github" I meant code on the internet (from the bank intranet) and accessible to anyone in the consulting company (public as in public network). There are multiple modules and they are moved to github,bitbucket and stash.
This also means people without background checks or ANYONE in the organization has access to ALL the code of the bank. In the bank ONLY people in specific departments have access to specific code (As is customary for all IT industry)
This in turn means all contractors that git sync have all code on their machines regardless of their access.
The consulting company is not breaking rules just for the sake of it but to speed up development although what they doing is illegal.
- detaro 10y ago> although what they doing is illegal I can't add much to help you, but I'd be interested what laws requiring background checks for this look like, could you tell me where I can find more about that? (I would have expected this to be "just" a contractual requirement between the bank and your employer)
- i336_ 10y agoOh ouch. That git setup is... great lawyer material. Wow.
- flukus 10y agoWhat SCM does that bank itself use? It may have started as a svn bridge or something and been moved to github and had access extended accidentally.