4 ms·
This is going to come off sounding a bit like victim blaming, but seriously, any business large or small must have a person or people whose responsibility it is
by JustSomeNobody 8y ago
This is going to come off sounding a bit like victim blaming, but seriously, any business large or small must have a person or people whose responsibility it is to audit all installed software so that nobody gets into a situation such as described in the article.
A business cant afford to let devs just install software willy-nilly like.
- crispyambulance 8y agoYet "willy-nilly" installations happen. It remains to be seen whether they'll "go after" the whales who can actually afford compliance staff (but screwed up anyway), or after the small-fish companies that just stood up a web-app to get started, or businesses in between.
- bloodgain 8y agoIt's not really the developers installing their own toolchain you have to worry about here, though. The folks working on the official builds and deployment should be far more aware of what's happening, because that's what has to be supported. If you're letting B&D do things willy-nilly, that's a serious business problem. I aware they're often the same folks (DevOps), but your senior engineer and/or project manager should be watching what's going out.