2 ms·
I am reading the comments and it's all how dumb IT is to use that instead of self hosting, how bad the saas companies are, etc. I wonder how many of the commen
by BrandoElFollito 3y ago
I am reading the comments and it's all how dumb IT is to use that instead of self hosting, how bad the saas companies are, etc.
I wonder how many of the commenters run a 30k+ users company IT Dept or are the CISO of such a company.
Well, everything is not a 2 years old startup with a Typescript stack on Postgres. Sometimes you have plenty of legacy systems, on prem services and a budget/headcount that allows you to go only that far by yourself.
Or an Exchange system basically abandoned by MS, so you either go for some roundcube install or M365.
Not all of your IT teams are either incompetent idiots, or psychopaths looking at making your life difficult. Sometimes they need to optimize and you see this optimization as idiotic while it may make sense in average.
Sure, I would prefer to have genius SaaS companies that provide a service that is fantastic, or just host Internet myself but sometimes it is not possible and you choose the least bad of the bad.
- redserk 3y agoAlso, self-hosting does not inherently make something more secure, especially if it's sitting on the public internet. It requires consistent monitoring and correctly setting up alarms for strange behavior. If monitoring is done wrong, it could be a while to find out someone gained access, if the malicious access is even noticed. While Okta seems to have a number of issues, they don't represent all companies handling access management.
- scient 3y agoSelf hosting likely makes it much much worse. I'm willing to bet a lot on the fact that most authors of these comments do not have any kind of experience with serious security or compliance programs.