Re:Why I Actively Discourage Online Tooling like jwt.io and ...
by troebr on Wednesday September 02, 2020 @10:47AM
(#24353792)
Do you work in a field that warrants this kind of stringent requirements or is the security team overzealous? Do these kind of rules extend to using third party libraries etc?
Re:Why I Actively Discourage Online Tooling like jwt.io and ...
by jcims on Wednesday September 02, 2020 @11:42AM
(#24354300)
Both probably. Most of these rules have come as a result of regulatory action/audit findings. Efforts to dial these back repeatedly get stymied by people demonstrating the need for such checks.
Re: third party libraries, yes absolutely.
The only way to legitimately use tools like these from work are if they pass rigorous vendor assessment processes and rock solid contracts in place covered by nine figure E&O policies.