3 ms·
I'm highly skeptical of the reporting. He may have impersonated other accounts to cover his tracks but if he had physical access to a system or the user databas
by pilom 13y ago
I'm highly skeptical of the reporting. He may have impersonated other accounts to cover his tracks but if he had physical access to a system or the user database of a system then he was "authorized" to see all of the data on that system. Or they are doing IT security worse in that office than it is usually done.
- sigzero 13y agoNo he wasn't. Security is a "need to know". Just because you have a TS clearance for example doesn't mean you have access to all TS information out there. If you step over that then you get slapped down.
- stcredzero 13y ago> they are doing IT security worse in that office than it is usually done Two things that are undeniable: 1) They were doing IT security worse than the level which was actually needed 2) All the while, they were telling the world that effective mechanisms were in place which would prevent abuses. So they weren't doing what they were supposed to and they were deceiving the public about it. Whether or not this was intentional is just secondary.