3 ms·
When it comes to security a threat actor is often someone you invited in who exceeds their expected authorization and takes harmful action they weren't supposed
by lolinder 1y ago
When it comes to security a threat actor is often someone you invited in who exceeds their expected authorization and takes harmful action they weren't supposed to be able to do. They're still an attacker from the perspective of a security team looking to build a security model, even though they were invited into the system.
- vel0city 1y ago> who exceeds their expected authorization Sorry, if you give someone full access to everything in your account don't be surprised they use it when suggested to use it. If you don't want them to have full access to everything, don't give them full access to everything.
- lolinder 1y agoThis is exactly what I'm advocating for: https://news.ycombinator.com/item?id=44103895 https://news.ycombinator.com/item?id=44103895
- deleted 1y ago[deleted]