4 ms·
If you take away NFS shares without providing a better way to store and manage access controls, engineers will eventually just come up with an even worse soluti
by eli 3y ago
If you take away NFS shares without providing a better way to store and manage access controls, engineers will eventually just come up with an even worse solution.
I'm skeptical you can even fix this without a culture change, but you definitely can't do it just by taking things away.
- foota 3y agoYes, I agree. I realize this isn't feasible everywhere, but having access tied to a user account (and then auditing and limiting that access) can serve as a replacement. E.g., want to select a single row? Fine, but if they're dumping the db something is phishey. Ironically, user accounts are in one sense more secure (than a system account with a shared password) because they can use 2fa (and there's no inherent need to distribute the password).
- deleted 3y ago[deleted]