3 ms·
The customer who hired this consultant was authorized to read that data because it was their data, not the vendor's; it was just stored on the vendor's server.
by the_why_of_y 3y ago
The customer who hired this consultant was authorized to read that data because it was their data, not the vendor's; it was just stored on the vendor's server.
- hnbad 3y agoHe was authorized to read that data. He was not authorized to freely access the server the data was stored on, or to extract the credentials from the software. This is an obvious difference that matters. I can't break into an AWS data center to access my data, even if I they didn't have any security and I knew exactly where my data is stored. Not because I could be seeing other people's data but because I'd be trespassing.