4 ms·
> I sure as hell am not going to assume legal liability over systems I do not really have control over. That’s pretty much the goal, isn’t it? If everyone refu
by setr 5y ago
> I sure as hell am not going to assume legal liability over systems I do not really have control over.
That’s pretty much the goal, isn’t it? If everyone refuses to do the work without sufficient control, then power should shift accordingly (and your peers who continue to accept responsibility without control will eventually be eliminated from the system…).
That is, the choice of security vs other priorities shouldn’t exist for certain classes of business/data, and sysadmins shouldn’t be doing that work without sufficient authority.
- syshum 5y agoThe world is never that simple, and to put that simplistic lens on it will be a net negative. These types of regulatory burdens further serve to consolidate the world in the large corporations as they are the only ones that have the resources to either navigate them, or pay for loop holes to them for their particular business. The unintended consequences from that would be far worse than the security issues you hope to address