Ubiquiti developer charged with extortion, causing 2020 “breach”

Re:Ubiquiti developer charged with extortion, causing 2020 “... by bigyellow on Monday December 06, 2021 @11:17AM (#29461590)

> Why was it so easy for a lead engineer to get access to a root AWS user without anyone else being notified?

Oh my sweet summer child. You haven't worked in large organizations with thousands of employees before, have you? Surely not if you think this is "Security 101".

[ Parent | on HN ]

Re:Ubiquiti developer charged with extortion, causing 2020 “... by LilBytes on Monday December 06, 2021 @11:50PM (#29469171)

Up to and including companies of 100,000 staff, to my current employer of < 100.

At around ~1,000 staff though you quickly lose "insight" into platform security as it's delegated out to sub-orgs within a larger organisation.

Though I've not worked at any FAANG companies where I'd hope security is... erm, of a certain 'maturity'. E.g. Google and BeyondCorp.

But I've no desire to rehash leet code exams or get back in that space so likely will never go there :).

[ Parent | on HN ]