4 ms·
I'll have a wild guess there: all devs and most managers have access to the full data set. Any disgruntled one could ex-filtrate it anywhere with not trace. Th
by arkh 9y ago
I'll have a wild guess there: all devs and most managers have access to the full data set. Any disgruntled one could ex-filtrate it anywhere with not trace.
That's the kind of things which make me for the vision of data as liability.
- walshemj 9y agoThey should have internal security teams that monitor this
- notyourday 9y agoDamn it. You owe me a new keyboard.
- codezero 9y agoAbsolutely not. We have strict control over our data and access to infrastructure. Every person with access can only get it via a bastion VPN with their own key. Access is logged to an external host which they do not have access to. We are SOC2 compliant (just waiting on final certification) and we have regular pen tests both against our code as well as our employees with mock phishing. As a total aside: it would cost a serious amount of money to exfiltrate the data in bulk, and would cause an obvious strain on our infrastructure. Assuming they get by all the above protections, and are really clever, sure, never say never, but I think we can not assume the worst but prepare for it none the less.