3 ms·
PCI environment for a household name ecommerce application with millions of users. Also we didn't use stock Ubuntu - I/we had to get it to not phone-home... it
by folkhack 7y ago
PCI environment for a household name ecommerce application with millions of users.
Also we didn't use stock Ubuntu - I/we had to get it to not phone-home... it was just extra layers of "we shouldn't have to do this" in regards to managing the OS.
I left the company when it was apparent that "security culture" were just buzzwords they would repeat in meetings to make themselves feel better vs. an actual core competency. They had more resources assigned to migrating our WordPress blog to K8s than they did for the credit-card handling infrastructure.
Honestly Ubuntu was one of the least of my worries, but after the experience of getting it to "shut up" and stop phoning home I made the decision to never recommend it moving forward as a security best practice.