Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

employees are trusted with secrets, so we have to audit that employees are treating those secrets securely

IMHO needing to be monitored constantly is not being "trusted" by any sense of the word.



I can trust you enough to let you borrow my car and not crash it, but still want to know where my car is with an Airtag.

Similarly employees can be trusted enough with access to prod, while the company wants to protect itself from someone getting phished or from running the wrong "curl | bash" command, so the company doesn't get pwned.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: