3 ms·
If it's internal, did they really need to have auth?
by knowitnone 2y ago
If it's internal, did they really need to have auth?
- JumpCrisscross 2y ago> If it's internal, did they really need to have auth? Nothing on a network is truly internal. The moment you break the physical link between metal and man you're in an unintuitive, and thus insecure, state.
- larsrc 2y agoYES!!! You need auth to prevent employees from looking up sensitive user data without a good reason, or it'll be a stalker's haven. And to prevent possible intruders from gaining more data/access. Defense in depth. And for preventing an experiment from wiping use data. And for so many other reasons!
- mrguyorama 2y agoThe term of art is "Friendly fraud". A significant amount of product stolen from retail stores actually goes out the back door.