3 ms·
Well I am rather emotional because such comments assume that people in cybersecurity are a bunch of idiots who have no idea about how to do their job. But th
by JackSlateur 2y ago
Well
I am rather emotional because such comments assume that people in cybersecurity are a bunch of idiots who have no idea about how to do their job. But thank you for showing us the path.
But in my experience, this is exactly the case. I've successfully elevated myself from <nothing> to <global super admin>, in two very large compagny. First one, I got anonymous AWS super admin access. Second one (where I'm still at), I got admin AD access (again, anonymous), as well as git admin, access to all k8s and admin azure (all subs).
From there, and considering that the security people were shocked, what should be the conclusion ?
Most importantly : considering that security people, once informed of the details, did nothing about it, how on earth should I respect such clowns ?
(I'm not saying good people do not exist)
- sofixa 2y agoEh, to give credit, cybersecurity can never be perfect. I have a much bigger problem with cybersecurity "professionals" who have no idea what they're doing, purely engaging in checkbox ticking without considering or understanding the impact of their work. And worst of all, unable to comprehend when being explained that what they've enacted makes no sense and doesn't improve security (or actively harms it). Those are the worst.