> Have you heard a similar argument to “we don’t need authentication to this application because it’s only accessible on the VPN”? Not personally. I've only re

> Have you heard a similar argument to “we don’t need authentication to this application because it’s only accessible on the VPN”? Not personally. I've only read anecdotes like these online. But that's not even the point. People make stupid arguments about everything all the time. Have you heard a similar argument to "We don't need regulation because the market will take care of it"? Surely you don't hear that and conclude "let's get rid of the market"? (Or, I guess this is HN, so maybe you do...)