4 ms·
> I'm surprised that this stuff is audit only These days things are mostly working the way you describe - I need to request permission to view my own service’s
by Shish2k 5y ago
> I'm surprised that this stuff is audit only
These days things are mostly working the way you describe - I need to request permission to view my own service’s logs, and I’m working in backend infra not going anywhere near user data (logs are like “did we hit any hardware errors when trying to install the OS on this host?”)
- asdfasgasdgasdg 5y agoGreat to hear. I think a lot of big internet companies are moving in this direction, although I don't know if it affects user trust all that much since it isn't publicized. I guess the one thing is that incidents like the one reported here will be avoided in the future, so in ten or twenty years there will have been less reputational damage than in an alternative universe where these controls don't exist.