News for hackers. Stuff that matters.

A comment on Coinbase Announces 18% Layoffs. Parent comment

Re:Coinbase Announces 18% Layoffs by UncleMeat on Tuesday June 14, 2022 @09:08AM (#31738852)
But you can still restrict that. Make it so every access must be tied to a specific open ticket. Don't just say "well, this person sometimes needs access to a specific customer's information so they can have permanent always-on access to all customer information."
[ Parent | on HN ]
Re:Coinbase Announces 18% Layoffs by sebzim4500 on Tuesday June 14, 2022 @09:26AM (#31739103)
How do you know it isn't? The only claim was that there are many employees with acess to 'sensitive customer information'. That would be the case even if the employees could only see customer information associated with tickets that they had been assigned.
[ Parent | on HN ]
Re:Coinbase Announces 18% Layoffs by verbify on Tuesday June 14, 2022 @09:15AM (#31738958)
That's a mitigation strategy but there are many open tickets at any one time. The employee can just go through open tickets and wreak havoc.
[ Parent | on HN ]