>I know this is an unpopular opinion here, but I personally think that you shouldn't mess with people's shit unless they invite you to Here's the problem: Last

>I know this is an unpopular opinion here, but I personally think that you shouldn't mess with people's shit unless they invite you to Here's the problem: Last job I had, I was told I had to open a google account, because the company used google docs. Mandatory, I was told. Company policy. I passive-aggressively opened one called <company name>_temp, and deleted it when I finished the job, but I wasn't going to risk the job itself by flat out refusing. Does a company have the legal authority to compel it's employees to open accounts that require third party agreements? Don't know, not a lawyer, probably country specific, but it's not relevant because even if the legal answer is no, you can't start a lawsuit against your own employer. Now, Google does have a bounty program, but we used dozens of pieces of software at that company from small providers who did not. As luck would have it, none of them were account based information vacuums, but they could have been, and if they had been, I'd have been at their mercy when it came to security. It would have been that or my job. My unpopular opinion is that the software industry needs way more regulation. We crash-test cars, we should crash-test software. I definitely support impromptu third party pentesting, because it's currently the only way I find out about lazy companies who don't take my security seriously, particularly ones that I am compelled to use. They sure as hell never call themselves out on it.