4 ms·
Do you imagine that engineers at Google just wander around with unaudited ability to disable audit logs?
by dodobirdlord 7y ago
Do you imagine that engineers at Google just wander around with unaudited ability to disable audit logs?
- markholmes 7y agoDo you imagine this to be an impossibility? It would only take one.
- dodobirdlord 7y agoI imagine that nobody has ever been deliberately given this power (why would it need to exist?), and that the auditing implementation is robust against most combinations of credentials that most engineers could put together. The number of people that could pull it off in theory is probably very small, the number that could do it in practice without leaving any trace is probably 0.
- JetSpiegel 7y agoIf they have legitimate access to the underlying infrastructure, they can just run cat on the physical files.
- dodobirdlord 7y agoEven if you manage to end up as root in a shell on the host OS, the data you're interested in is going to be encrypted at rest, probably with keys that aren't on the same machine, and your access to the machine is going to have been logged somewhere. Access to the underlying infrastructure for the data persistence layer is also presumably granted to a tiny fraction of engineers. Only the relevant teams would need it, and even then not all of them.