Re:Elon Musk emails employees about 'extensive and damaging ...
by gnode on Tuesday June 19, 2018 @05:33AM
(#17345031)
There may have been. The article speaks of the employee using "false usernames". Code review may stop some foolish person pushing broken code, but it's not going to prevent a determined saboteur who's masquerading as other authorised users.
[ Parent
| on HN ]
Re:Elon Musk emails employees about 'extensive and damaging ...
by pvaldes on Tuesday June 19, 2018 @06:09AM
(#17345212)
How the saboteur knew the passwords of all those users before?
If it was a totally new user, shouldn't the system have a list of approved users and a strict protocol to validate a new user?
Re:Elon Musk emails employees about 'extensive and damaging ...
by falsedan on Tuesday June 19, 2018 @06:23AM
(#17345292)
I'm baffled at your lack of imagination, but: keyloggers, unlocked terminals, API token sniffing from cookies, reactivated old accounts, changing the reviewing account id in the database, …
Re:Elon Musk emails employees about 'extensive and damaging ...
by XorNot on Tuesday June 19, 2018 @08:04AM
(#17345777)
"Hey Ed my password expired, can you use yours to get this done just now..."
Re:Elon Musk emails employees about 'extensive and damaging ...
by pvaldes on Tuesday June 19, 2018 @09:17AM
(#17346278)
One or two times maybe, repeating the trick a lot of times with multiple people without ringing any bell, seem less probable statistically.
Re:Elon Musk emails employees about 'extensive and damaging ...
by hfdgiutdryg on Tuesday June 19, 2018 @09:07AM
(#17346191)
I'm baffled at your lack of imagination
What does being rude add to the discussion?