4 ms·
Unsolicited direct inspection of customer content is what’s surprising. I know we don’t have homeomorphic encryption, but typically policies (requiring explici
by rrdharan 4y ago
Unsolicited direct inspection of customer content is what’s surprising.
I know we don’t have homeomorphic encryption, but typically policies (requiring explicit user request /
Consent) would be in place even if they can’t be sufficiently enforced with current technology.
The whole thing reminds me of that Azure LinkedIn thing (where someone was contacted on LinkedIn by a Microsoft PM based on their azure activity).
- TheHappyOddish 4y agoIt was pretty normal in that space. Good MSPs proactively monitored their customers servers for issues. I certainly would have sent a wall message if I saw the customer was on the machine.
- bravetraveler 4y agoUnderstandably so! There is a relationship that I find difficult to explain here. For a managed service provider, we were there mainly for the operating system. If told about particular services, those too. To tend to that, we had to maintain more access than what common convention today tells us should be comfortable. It's really sold as "an extension (or replacement) for your IT department" We would do everything we could to avoid going even remotely near the data, but it does depend on a bit of 'trust us' There were varying degrees to it, too. Some customers would get notified if we even pulled their IP addresses, others only if we logged in, some if we escalated privileges at all. Like the peer comment from TheHappyOddish mentions, sending a wall message to folks logged in was a sort of common courtesy; chances are we're both in here for the same reason.