3 ms·
IT credentials should be treated as sacrosanct. Your credentials represent you and are, in many cases, indelibly tied to those credentials. Providing those cred
by cmiles74 9y ago
IT credentials should be treated as sacrosanct. Your credentials represent you and are, in many cases, indelibly tied to those credentials. Providing those credentials to others is the most coarse grained method of delegating _all_ of your abilities under that credential.
In this case we're talking about pornography and, apparently, rather pedestrian pornography at that. I have no doubt that this will end with people chuckling at each other and that will be the end of it.
Should someone mail out state secrets with these credentials the tone of these stories will be very different. This attitude of "sharing credentials makes my job easier" will meet with far less indulgent attitudes. Heads may very well roll and making it more difficult to pinpoint an individual will not be so easily tolerated.
Bottom line, sharing the credentials represents very real risk. Perhaps members of parliament do nothing of consequence with their email and that is why this has been allowed to go on for so long.
- Spooky23 9y agoThat argument is bunk. Any competent organization in government protects state secrets with a multi-factor credential that’s protects against reuse, some sort of network isolation, and serious criminal penalties for violation of those rules. Outside of the enterprise, people do this all of the time with limited powers of attorney and other mechanisms. When I had an assistant, I delegated to her the ability to pay my AMEX. If people are commonly sharing credentials, it’s a sign that IT or the business doesn’t have its shit together, just like most random Visa/MasterCard issuing banks don’t with respect to delegation of access.