Elon Musk emails employees about 'extensive and damaging sabotage' by employee

Re:Elon Musk emails employees about 'extensive and damaging ... by alxlaz on Tuesday June 19, 2018 @02:46PM (#17349268)

In a normal company, you could absolutely not create a fictitious account that way, or re-use the credentials of someone who just left. But more important, there is a very, very long way from having created a fictitious person to being able to push stuff to production in their name.

The former restriction is maybe difficult enough to efficiently implement in an organization that it's excusable (we have a scheme for it at $work, but it unfortunately means that sometimes people show up at work and the paperwork isn't ready yet and some of the accounts they need aren't yet ready).

The latter, on the other hand, is security 101 and not implementing it on the production floor is just irresponsible. I really hope it's not what happened.

[ Parent | on HN ]

Re:Elon Musk emails employees about 'extensive and damaging ... by daemin on Tuesday June 19, 2018 @03:14PM (#17349481)

So what are the odds then that they created a new user account on some local machine and used that to make the changes?

[ Parent | on HN ]

Re:Elon Musk emails employees about 'extensive and damaging ... by alxlaz on Tuesday June 19, 2018 @04:07PM (#17349909)

If we're talking about changes to the software that's used to manufactures vehicles that are driving on public roads, I sure as hell hope the odds are zero.

[ Parent | on HN ]

Re:Elon Musk emails employees about 'extensive and damaging ... by daemin on Wednesday June 20, 2018 @05:43AM (#17353836)

I hope so too, but then again we constantly read stories where serious industrial equipment and critical infrastructure has their computer systems opened up to the wide Internet because someone thought they would like to control it from a crappy app on their phone. Etc.

[ Parent | on HN ]