3 ms·
I think a lot of people aren't actually aware of how much they already rely on trust - I dread to think how much an actually adversarial employee could have cos
by kimixa 3y ago
I think a lot of people aren't actually aware of how much they already rely on trust - I dread to think how much an actually adversarial employee could have cost as many of the places I have worked...
- Aeolun 3y agoIt did always strike me as somewhat unreasonable that my job trusts me with the ability to spin up an arbitrary number of $100/hour AWS instances, but not with purchasing a $60 mouse.
- _rutinerad 3y agoThe bean counters only understand (and measure) one of those well enough to try to control it.
- fragmede 3y agoCIA: The Art of Simple Sabotage https://www.cia.gov/stories/story/the-art-of-simple-sabotage/ https://www.cia.gov/stories/story/the-art-of-simple-sabotage...
- deleted 3y ago[deleted]
- nine_k 3y agoTrust is a key enabler. I avoid low-trust environments, because nothing can get done there, everyone is suspicious and puts CYA first. Ironically, a high-transparency, high-trust environment is exactly what makes teams of remote workers efficient. But it greatly helps in the office, too.
- erik_seaberg 3y agoIt’s kind of terrifying to have and give out admin powers with no oversight (except maybe forensics if we’re lucky). I’m interested in what alternatives could look like. Maybe provisioning requests take multiple signatures, like turning missile keys?
- junto 3y agoWe use PIM in the Azure world. You can also use Azure PIM with AWS. https://learn.microsoft.com/en-us/entra/id-governance/privileged-identity-management/pim-configure https://learn.microsoft.com/en-us/entra/id-governance/privil...