4 ms·
Fun fact (which is a fact but not fun at all): every org that has SharePoint has enormous critical/sensitive data all over the place. Anything from trade secret
by HenryBemis 2y ago
Fun fact (which is a fact but not fun at all): every org that has SharePoint has enormous critical/sensitive data all over the place. Anything from trade secrets, future plans, passwords, personal data, etc. So compromising 'one account' means that someone can start roaming on the intranet, start searching for keywords ('password:', 'passport ID', 'home address', 'home number', 'driver's license', etc.) and will collect all the data they need for further attacks.
- 1oooqooq 2y agosame with google docs et al. and the one encopassing it all: apple, where everyone puts whatever withot even realizing.
- itomato 2y agoGood luck getting meaningful results from SharePoint search
- neilv 2y agoIt's a strange combination of leaking the information to those who shouldn't have it, while denying the information to those who should. (Denying, through non-discoverability, haphazard access controls, buggy application behavior, and often simply being deleted.) And that's not my only major objection to the current Microsoft dysfunctional-company software suite. I just realized I'm clenching my teeth, from recalling how harmful that load of shit was, the last time I saw it crippling employee effectiveness.
- ecshafer 2y agoLuckily if these secrets are in Sharepoint, no one will be able to find them, so they are safe. The only discoverability I have seen work in Sharepoint, is the person who wrote something linking the document directly to a person in a pm.
- artificialLimbs 2y agoYou can mount it as a network drive. Which means you can run Voidtools Everything on it to insta-search files and grep through wsl.
- pjmlp 2y agoIt isn't only Sharepoint, whatever is used as Wiki documentation source, Sharepoint, Azure DevOps, Confluence, TWiki, you name it. Turns out it doesn't matter how many security trainings we make them go through.
- cutemonster 2y agoWhat if the KPIs are wrong somehow? If people get rewarded for starting and completing projects, but not for security related things? Then no amount of practice would make any difference?
- pjmlp 2y agoMore like there is not enough liability in place. In the rest of professions, the reward is to keep their job and business, when compliance isn't ignored.