Hackers claim to have breached Okta systems

Re:Hackers claim to have breached Okta systems by pid-1 on Tuesday March 22, 2022 @07:11AM (#30764734)

If you have access to valuable assets of a company, you must be handsomely paid to avoid stuff like bribes.

Industries ex software know that since time immemorial.

Prob the software way of solving that is with least privileged access, automatic auditing and approvals.

I wonder why not even security companies are doing that correctly though.

[ Parent | on HN ]

Re:Hackers claim to have breached Okta systems by thinkharderdev on Tuesday March 22, 2022 @07:55AM (#30764957)

For insider attacks auditing is really critical. At some level there will always have to be human beings with superuser access. But if every admin access and action is logged, audited and tied to a specific person then it becomes very hard to abuse that access without getting caught.

[ Parent | on HN ]

Re:Hackers claim to have breached Okta systems by lupire on Tuesday March 22, 2022 @09:06AM (#30765561)

Superusers can disable logging, but yea the risk can be reduced.

[ Parent | on HN ]

Re:Hackers claim to have breached Okta systems by lupire on Tuesday March 22, 2022 @09:05AM (#30765551)

Same reason why everything is shoddy: customers buy the cheapest or free solution and don't care if it fails.

Why should a business care if it gets hacked? It's the users that suffer and they don't have an alternative.

[ Parent | on HN ]