News for hackers. Stuff that matters.
Re:A Facebook engineer abused access to user data to track d... by Shish2k on Wednesday July 14, 2021 @10:46AM (#27833626)
> I'm surprised that this stuff is audit only

These days things are mostly working the way you describe - I need to request permission to view my own service’s logs, and I’m working in backend infra not going anywhere near user data (logs are like “did we hit any hardware errors when trying to install the OS on this host?”)

Re:A Facebook engineer abused access to user data to track d... by asdfasgasdgasdg on Wednesday July 14, 2021 @10:52AM (#27833704)
Great to hear. I think a lot of big internet companies are moving in this direction, although I don't know if it affects user trust all that much since it isn't publicized. I guess the one thing is that incidents like the one reported here will be avoided in the future, so in ten or twenty years there will have been less reputational damage than in an alternative universe where these controls don't exist.