5 ms·
And IT has time to check alarms, very unrealistic.
by ju-st 8y ago
And IT has time to check alarms, very unrealistic.
- neolefty 8y agoPlus, budget to hire a pen tester?!?
- Cursuviam 8y agoI mean its consistent with the fact that they actually had good security, thus they're probably not shorting the IT budget.
- marcofloriano 8y agoA bank!
- johann8384 8y agoNah, I've worked with some banks here and there. Amazing lack of security. Can't talk specifics, but yeah, just wow....
- wongarsu 8y agoI think you dropped an /s The security of banks is certainly not in their IT departments.
- kevan 8y agoDepends on the culture. I interned at a place that fell under the Critical Infrastructure Protection program. It was so strict you'd get a visit from security if you tried to badge through a door you didn't have access to.
- closeparen 8y agoInteresting. I wonder if, in a “mind your own business,” curiosity-discouraged sort of environment, people might also be less likely to notice and report threats. The first thing I do with credentials is find out what they open. Seems like if you have the resources to follow up on access attempts, you have the resources to set ACLs correctly so you’re not scared of them.