3 ms·
It’s always really funny when “security” companies have a centralized DB that grants tons of employees permissions to browse it. What were they thinking? Could
by throwbahay 4y ago
It’s always really funny when “security” companies have a centralized DB that grants tons of employees permissions to browse it. What were they thinking?
Could have been much worse.
- arice 4y ago[HackerOne CTO here] There are certainly some important lessons for us to learn here but, just for clarity, this wasn't one of them. The data access in question here was central to the individual's daily job responsibilities and done through systems explicitly built for this purpose.