3 ms·
Do you want staff to be curious enough to... Let's see... Run queries on your customer database to find out their friends' account balances?
by mypalmike 5y ago
Do you want staff to be curious enough to... Let's see... Run queries on your customer database to find out their friends' account balances?
- educaysean 5y agoWhy did you immediately jump to a malicious scenario? Is that what you imagine curious people do?
- mypalmike 5y agoNo. My point is that curiosity is valuable, but so is integrity. The scenario I presented is around the same level of malicious as pen testing a competitor's new credit card API. Specifically, both are potentially criminal acts of illegal computer access (by current laws in the US), and both have negligible impact on their victims.