3 ms·
You forget the random acts of clod: 1. e-mailing passwords and personal information (because customers need doxed by their e-mail providers) 2. shipping comme
by Joel_Mckay 4y ago
You forget the random acts of clod:
1. e-mailing passwords and personal information (because customers need doxed by their e-mail providers)
2. shipping commercial beta source code to customers because someone was too impatient to learn how to package the product with a clearly labeled build script
3. shipping master x509 signing keys to random users because they are "good people" and can be trusted
4. deleting random database records with administrative privileges because it looked complicated and messy. Then tell users to pack data into document labels after destroying the key relationships.
5. goofing with passwords, then issuing a support ticket when they get auto-banned from the system
If you think an external adversary is more dangerous than someone who shouldn't have administrative privileges, than you have never dealt with real sentient liabilities.
This is why people get grey beards...
https://www.youtube.com/watch?v=uBpw1sdFu2w https://www.youtube.com/watch?v=uBpw1sdFu2w
- mijoharas 4y agoWhat does "clod" mean in this comment?
- Joel_Mckay 4y agoIts complicated, but hardly a colloquialism. I am alluding to the "90% of security breaches being internal" stat as likely being a gross underestimate. Implying people preoccupied with external threat vectors are often missing a key concept of risk mitigation. Have gloriously wonderful day =)
- mijoharas 4y agoOk, I just googled "clod" again, and noticed there is a second definition! I saw the first definition and looked for some other links to explain it but missed that one so was still confused. (I'd picked up what you were saying about internal threat vectors from the rest of the comment, I was literally just asking for the meaning of the word "clod")