News for hackers. Stuff that matters.
Re:Former Twitter Employees Charged with Spying for Saudi Ar... by journalctl on Wednesday November 06, 2019 @07:23PM (#21469141)
Maybe because tech companies tend to be careless with data. It isn’t NP-complete to track and monitor access to prod data, or prevent access to it entirely. It’s just that people don’t want to do it.
Re:Former Twitter Employees Charged with Spying for Saudi Ar... by closeparen on Wednesday November 06, 2019 @07:29PM (#21469192)
It is pretty damn hard to reliably operate a service that you can’t introspect or debug in any way. The real world is more creative than you; things will happen in production that you didn’t think of in your synthetic test fixtures.
Re:Former Twitter Employees Charged with Spying for Saudi Ar... by journalctl on Wednesday November 06, 2019 @10:31PM (#21470158)
That’s still no excuse. Maybe Bill has to access some customer data to troubleshoot. Fine, log it. Maybe Susan has to look at sensitive logs to fix a bug. Fine, log it. These aren’t new or unsolvable problems.
Re:Former Twitter Employees Charged with Spying for Saudi Ar... by closeparen on Thursday November 07, 2019 @12:40AM (#21470741)
Who says there weren’t logs? They got caught.
Re:Former Twitter Employees Charged with Spying for Saudi Ar... by d1zzy on Wednesday November 06, 2019 @07:32PM (#21469213)
Please back this up and define the terms used.

As in, define "tech companies" (name specific companies that do this and why you think that can be generalized to the entire industry) and define "careless" (it's a relative term so please say if it's less or more careless of other examples of organizations that manage similarly large amounts of data but that aren't "tech companies").

Because to me the opposite seems true. It's the non-tech companies (if you equate that to FAANG) that manage large amounts of data that tend to have a lot more data leaks (internal or external) than the tech companies.