3 ms·
Am I missing something? This is a marketing piece for a security software. The entire argument is that: - The corporate spyware wasn't used enough - Engineers
by legitster 4y ago
Am I missing something? This is a marketing piece for a security software. The entire argument is that:
- The corporate spyware wasn't used enough
- Engineers had too much access to code
- Employees were allowed to install personal software on their computer
That's it? Twitter is guilty of running a chill office? Is there any actual vulnerability?
- xkcd-sucks 4y ago> The Twitter Whistleblower Should Sound Alarms for Everyone Drums beating for a war on 'Shadow IT' (and for an even more adversarial relationship between IT and Engineering) sounds pretty alarming for sure
- fakethenews2022 4y agoThere were multiple proven vulnerabilities. https://www.bbc.com/news/technology-53439585 https://www.bbc.com/news/technology-53439585
- rajeshp1986 4y agoMudge probably wanted things to similar to banks: 1) I don't think having a single mono-repo and everyone having access is a major security concern. 2) Employees should only run corporate approved software. considering he only worked there for 8 months, I doubt how much his information is credible.
- PeterisP 4y agoI'm not reading the report as stating that everyone having access to the whole mono-repo is a security concern, but rather that the majority of people had unrestricted access to production systems. It's one thing to be able to read all of the code, it's entirely another thing to be able to deploy arbitrary changes to production without a review.
- pkrumins 4y agoThis is probably the perfect example of why you don’t hire people who don’t fit your company’s culture.