News for hackers. Stuff that matters.

A comment on Why Twitter didn’t go down: From a real Twitter SRE. Parent comment

Re:Why Twitter didn’t go down: From a real Twitter SRE by Xylakant on Tuesday November 22, 2022 @05:04AM (#33704050)
At this scale, having someone take care of deleting double/expired accounts is just good hygiene and I would not consider that useless. Forgotten accounts are a security risk.
[ Parent | on HN ]
Re:Why Twitter didn’t go down: From a real Twitter SRE by papito on Tuesday November 22, 2022 @05:46AM (#33704317)
The bigger question is why such a large bank does not have solid off-boarding procedures.
[ Parent | on HN ]
Re:Why Twitter didn’t go down: From a real Twitter SRE by Xylakant on Tuesday November 22, 2022 @05:58AM (#33704389)
Any off-boarding procedure fails - at that scale, if even one in one thousand fails, you can expect a couple of failures per year. ensuring these get caught is part of "solid offboarding".
[ Parent | on HN ]
Re:Why Twitter didn’t go down: From a real Twitter SRE by orwin on Tuesday November 22, 2022 @05:54AM (#33704365)
They had that on the financial side. The eng/HR side was behind for sure.
[ Parent | on HN ]
Re:Why Twitter didn’t go down: From a real Twitter SRE by anon400232 on Tuesday November 22, 2022 @07:32AM (#33705053)
Hello tip, meet iceberg.
[ Parent | on HN ]
Re:Why Twitter didn’t go down: From a real Twitter SRE by pixl97 on Tuesday November 22, 2022 @08:41AM (#33705630)
Do you even begin to understand how many applications a large bank actually manages?
[ Parent | on HN ]
Re:Why Twitter didn’t go down: From a real Twitter SRE by papito on Tuesday November 22, 2022 @02:39PM (#33710270)
That's not an excuse. If a bank can make sure that they do not mistakenly just deposit free money into people's accounts by mistake, they can ensure that a person who has left (possibly on bad terms) still has access to critical systems.

That's an entity that specializes in RISK ASSESSMENT.

[ Parent | on HN ]
Re:Why Twitter didn’t go down: From a real Twitter SRE by bushbaba on Tuesday November 22, 2022 @05:57AM (#33704385)
A security risk which only gets worth with time.
[ Parent | on HN ]
Re:Why Twitter didn’t go down: From a real Twitter SRE by chasd00 on Tuesday November 22, 2022 @11:56AM (#33707886)
forgotten account that a former employee can re-activate or login with? I would think banks would be fined by regulators or risk their license over even a single instance of that.
[ Parent | on HN ]