5 ms·
A log aggregation store that can handle deletes is a security and compliance problem. Try proving to an auditor that a hacker couldn't have hacked in and then c
by randerson 2y ago
A log aggregation store that can handle deletes is a security and compliance problem. Try proving to an auditor that a hacker couldn't have hacked in and then covered their tracks by deleting the logs.
- thanksgiving 2y agoI don’t understand this… what if we had no logs?
- randerson 2y agoI should have mentioned this is really only an issue if your business has regulatory requirements that necessitate tamper-proof logging.
- hipadev23 2y agoThat’s an incredibly weak response. Laws you can’t fuck with, auditors can fuck off. I’d love you trying to explain to the EU why you’re violating their laws because some auditor wanted to check a box. I sure hope your auditors are assuming legal responsibility.
- randerson 2y agoDon't log anything you're not allowed to log. But in some industries (like finance) you need an immutable logging system and if you could easily delete evidence of a crime or security breach that would be a bug not a feature.