3 ms·
> There's no such thing as non-production/production systems Strongly disagree. If it's an isolated copy of your production system with fake credentials, fake
by hn_go_brrrrr 4y ago
> There's no such thing as non-production/production systems
Strongly disagree. If it's an isolated copy of your production system with fake credentials, fake data, etc, there's no associated risk. We explicitly turn off various security checks in our nonprod environment because it makes it easier to poke around and debug issues. That would never fly in prod, for obvious reasons.
- peblos 4y agoI guess the main assumption here is “if it’s an isolated copy of your production system” If that’s truly the case, and they’re fake data, I’d generally agree. That isn’t what’s happened with Optus and I dare say with many other orgs where nonprod is generally interchangeable with less secure