4 ms·
> Most organizations contain people who can be tricked, bribed, or accidentally hire an adversary. I've been thinking about this all week. I discovered a fairl
by flukus 9y ago
> Most organizations contain people who can be tricked, bribed, or accidentally hire an adversary.
I've been thinking about this all week. I discovered a fairly big vulnerability in our software the other day that allows anyone in the company to access data they shouldn't, not national secret level data, but enough that it could be somewhat valuable. We also have a number of people of a certain nationality that's somewhat hostile to the west, many of those people are programmers.
How would you differentiate incompetence that lead to the vulnerability from maliciousness that intentionally caused it?
- uptown 9y agoSo you're saying because you employ people from a country that's hostile to the west you trust them less than people from your own country? Sounds like the vulnerability isn't your primary problem.
- flukus 9y agoHostile and known for subterfuge. Most are probably alright but one in particular also had a run at politics with a fair bit of financial backing from this country.