News for hackers. Stuff that matters.

A comment on You Are Not Google (2017). Parent comment

Re:You Are Not Google (2017) by hackerpacker on Thursday April 04, 2019 @10:34PM (#19579153)
so, what is to stop them from running code from the app?!? Who do you call when something breaks? Do you expect the dev to not be able to log in and investigate at 3am or whenever?

I mean if you can't trust your dev team, or the procedures surrounding them, you are kinda screwed.

[ Parent | on HN ]
Re:You Are Not Google (2017) by staticassertion on Thursday April 04, 2019 @10:36PM (#19579160)
To be clear, the issue isn't about trusting developers in prod. It's about limiting access to prod as an avenue for attackers who will be looking to get in there and exfil sensitive data.

Nothing to do with trust of devs.

[ Parent | on HN ]