News for hackers. Stuff that matters.

A comment on Zoom Security Exploit: Cracking private meeting passwords. Parent comment

Re:Zoom Security Exploit: Cracking private meeting passwords by fendy3002 on Wednesday July 29, 2020 @08:51PM (#23993212)
Honest question, who can keep the access to production in the eye of GDPR?
[ Parent | on HN ]
Re:Zoom Security Exploit: Cracking private meeting passwords by saratogacx on Thursday July 30, 2020 @12:27AM (#23994679)
Operations staff gets access to production machines with Operations being explicitly forbidden from producing code that runs on the systems.

There are still vectors for bad actors of course, but the idea is to firewall those who write the code from those who run it.

[ Parent | on HN ]
Re:Zoom Security Exploit: Cracking private meeting passwords by malka on Wednesday July 29, 2020 @09:24PM (#23993370)
the production team can. it has made very hard to debug. Now the production team has to do most of the debug work, they have to give us anonymised data (and you cant turn personal data in anomymous data. it would be pseudonymous at best) that trigger the bug.

It can be pretty hard if your organization was not organized with this in mind in the first place.

[ Parent | on HN ]
Re:Zoom Security Exploit: Cracking private meeting passwords by netsectoday on Wednesday July 29, 2020 @11:42PM (#23994380)
Honest answer, everyone who claims to be GDPR or HIPAA compliant is lying and hopes you never find out.
[ Parent | on HN ]