7 ms·
If you have access to valuable assets of a company, you must be handsomely paid to avoid stuff like bribes. Industries ex software know that since time immemor
by pid-1 5y ago
If you have access to valuable assets of a company, you must be handsomely paid to avoid stuff like bribes.
Industries ex software know that since time immemorial.
Prob the software way of solving that is with least privileged access, automatic auditing and approvals.
I wonder why not even security companies are doing that correctly though.
- thinkharderdev 5y agoFor insider attacks auditing is really critical. At some level there will always have to be human beings with superuser access. But if every admin access and action is logged, audited and tied to a specific person then it becomes very hard to abuse that access without getting caught.
- lupire 5y agoSuperusers can disable logging, but yea the risk can be reduced.
- lupire 5y agoSame reason why everything is shoddy: customers buy the cheapest or free solution and don't care if it fails. Why should a business care if it gets hacked? It's the users that suffer and they don't have an alternative.