3 ms·
I'm surprised somebody hasn't yet made an "audit log as a service". The Reddit comment editing is one place that shows why companies cannot be trusted. But, for
by philip1209 8y ago
I'm surprised somebody hasn't yet made an "audit log as a service". The Reddit comment editing is one place that shows why companies cannot be trusted. But, for enterprise security, you also want a log that cannot be tampered with.
- root_axis 8y agoBlockchains are pointless for "enterprise security" because "enterprise" already implies a trusted authority.
- Karunamon 8y agoBeing in an enterprise doesn't mean you have ultimate trust of every single individual with write access. There's a reason many orgs operate under a two-person rule for access to some data, have change controls, and so forth.
- root_axis 8y agoThat's irrelevant. The point is that the enterprise is a centralized authority so it can trivially codify its business rules into a centralized system; nothing is gained by using a blockchain. Tracking, audits, and tamper resistance is already possible without a blockchain.
- Karunamon 8y agoOnly thing I took issue with is the overbroad statement "because "enterprise" already implies a trusted authority" It does not necessarily.
- root_axis 8y agoNo. It necessarily does. The enterprise is the final authority regarding whether or not the system is behaving correctly, not a distributed consensus.