3 ms·
> Exfiltration means getting hold of data which you shouldn't be able to access or download. That's incorrect. Someone with legitimate access to data can stil
by IncRnd 5y ago
> Exfiltration means getting hold of data which you shouldn't be able to access or download.
That's incorrect. Someone with legitimate access to data can still exfiltrate it, which means to covertly remove it to outside the organization.
For example, someone in HR might have payroll data they can properly access. However, when they send that data home over a covert channel, that is exfiltration.
- TameAntelope 5y agoNot to be too nitpicky, but that person in HR "shouldn't" be allowed to download that data, which would fall under the definition of the person you replied to.
- eli 5y agoAnd you "shouldn't" use a build pipeline to push source code to S3