Meldium (YC W13) Controls Your Team’s Shared App Passwords For You

Re:Meldium (YC W13) Controls Your Team’s Shared App Password... by WestCoastJustin on Monday February 25, 2013 @09:48PM (#5283604)

Scary as hell. Download password safe and keep your crown jewels at home! I don't care if users never see the password or if they are encrypted on their side. Giving your Twitter, Github, or AWS?! keys to someone else. Jesus, this is the wrong idea and anyone who gets burned deserves it! This speaks to a wider trend of turning your business information over to other people. Your internal helpdesk, mail, wiki pages, your source code, and now your passwords?! Come on. A rouge employee and you are fucked!

It would be interesting to see what they offer if someone exposed their database and caused your financial ruin?

[ Parent | on HN ]

Re:Meldium (YC W13) Controls Your Team’s Shared App Password... by josephlord on Tuesday February 26, 2013 @09:28AM (#5285694)

Don't worry about the rouge employees it is easy to spot the red ones, it is the rogues that you need to worry about!

But I fundamentally agree, you need to consider that in many cases you are not just subject to your own risks and threats (internal and external) but each of your suppliers (and their suppliers such as Heroku and AWS) and their internal and external risks added to yours.

[ Parent | on HN ]