3 ms·
Perhaps some processes should be put into place to make exposing the entire company into a multi-step failure?
by bee_rider 2y ago
Perhaps some processes should be put into place to make exposing the entire company into a multi-step failure?
- pavel_lishin 2y agoPerhaps some already exist. But if they have five security processes that each has a 99% chance of catching a bug, that's still a 1-in-10,000 chance that something will slip through. And I'd wager that a16z has more than 10,000 "components" that goes through those processes.
- dpkirchner 2y agoI've considered tracing outgoing responses from nginx/traefik/whatever to watch for known API keys. The difficulty would be identifying the keys amongst the noise.