News for hackers. Stuff that matters.
Re:Why Twitter didn’t go down: From a real Twitter SRE by orwin on Tuesday November 22, 2022 @03:33AM (#33703432)
I worked for a bank with 28000 total engineers. I know because part of what i did was crunching github and gitlab data and detecting double accounts (and deleting account from people not there anymore). I'd say 3/4th of them were just cost of doing business. Including me (my role wasn't really necessary, the stuff i did was cool and everything, but a bit useless).
Re:Why Twitter didn’t go down: From a real Twitter SRE by Xylakant on Tuesday November 22, 2022 @05:04AM (#33704050)
At this scale, having someone take care of deleting double/expired accounts is just good hygiene and I would not consider that useless. Forgotten accounts are a security risk.
Re:Why Twitter didn’t go down: From a real Twitter SRE by papito on Tuesday November 22, 2022 @05:46AM (#33704317)
The bigger question is why such a large bank does not have solid off-boarding procedures.
Re:Why Twitter didn’t go down: From a real Twitter SRE by Xylakant on Tuesday November 22, 2022 @05:58AM (#33704389)
Any off-boarding procedure fails - at that scale, if even one in one thousand fails, you can expect a couple of failures per year. ensuring these get caught is part of "solid offboarding".
Re:Why Twitter didn’t go down: From a real Twitter SRE by orwin on Tuesday November 22, 2022 @05:54AM (#33704365)
They had that on the financial side. The eng/HR side was behind for sure.
Re:Why Twitter didn’t go down: From a real Twitter SRE by anon400232 on Tuesday November 22, 2022 @07:32AM (#33705053)
Hello tip, meet iceberg.
Re:Why Twitter didn’t go down: From a real Twitter SRE by pixl97 on Tuesday November 22, 2022 @08:41AM (#33705630)
Do you even begin to understand how many applications a large bank actually manages?
Re:Why Twitter didn’t go down: From a real Twitter SRE by papito on Tuesday November 22, 2022 @02:39PM (#33710270)
That's not an excuse. If a bank can make sure that they do not mistakenly just deposit free money into people's accounts by mistake, they can ensure that a person who has left (possibly on bad terms) still has access to critical systems.

That's an entity that specializes in RISK ASSESSMENT.

Re:Why Twitter didn’t go down: From a real Twitter SRE by bushbaba on Tuesday November 22, 2022 @05:57AM (#33704385)
A security risk which only gets worth with time.
Re:Why Twitter didn’t go down: From a real Twitter SRE by chasd00 on Tuesday November 22, 2022 @11:56AM (#33707886)
forgotten account that a former employee can re-activate or login with? I would think banks would be fined by regulators or risk their license over even a single instance of that.