4 ms·
I understand the concept, but that doesn't justify the level of government interference we have in the banking industry. I'm in IT security for a financial ins
by unethical_ban 6y ago
I understand the concept, but that doesn't justify the level of government interference we have in the banking industry.
I'm in IT security for a financial institution, and we have regulators checking the permissions of our NTP configs and that IPV6 is disabled on our cloud instances.
Those are two trivial examples out of 10,000 I could give on how there is a cottage industry of regulators and consultants and auditors making things over complex, milking money from banks, and generally making it harder to do your job because one time, this one place had this one issue.
Frankly, I'd like to get out of the banking industry because of how stupid all this shit is - most auditors don't even know what they're talking about. It'd be like hiring some HN commenters to review the schematics of the 737 for safety.
- sn_master 6y agoWhat's the advantage of having IPv6 disabled?
- jedberg 6y agoIf your firewall isn’t configured correctly then it’s really easy to directly access a host from the internet. It’s easier for the regulator to just make sure ipv6 is off (and all of the ipv4 are private addresses) instead of verifying the firewall config.
- sn_master 6y agoI see. Might as well just make sure everything is in a VPC.