News for hackers. Stuff that matters.

A comment on Why We Need Dynamic Secrets. Parent comment

Re:Why We Need Dynamic Secrets by vinceguidry on Wednesday September 12, 2018 @09:14AM (#17968287)
Vault doesn't try to solve the human trust problem, just the application trust problem. It assumes you can trust the humans involved in the system. Secrets simply don't live with applications.

Solving the human trust problem is far more difficult and outside the realm of a single software application.

[ Parent | on HN ]
Re:Why We Need Dynamic Secrets by protonfish on Wednesday September 12, 2018 @10:16AM (#17968987)
But if the human "trust" problem is the weakest link, improving security in other ways is just theater. It's like adding a deadbolt to a door adjacent to an open window.
[ Parent | on HN ]
Re:Why We Need Dynamic Secrets by vinceguidry on Wednesday September 12, 2018 @10:47AM (#17969290)
The human trust problem isn't the weakest link, the application is. Way more applications get hacked than humans.
[ Parent | on HN ]