undefined | Better HN

0 pointsAmericanChopper6y ago0 comments

> Working from a point of "I don't trust my employees" is very painful for many reasons.

It’s probably the hardest problem to solve in general, but it’s exactly what a well designed separation of duties is supposed to address.

0 comments

I have never even heard of an internal site-wide pentest that failed.

dmix6y ago

I'm guessing Coinbase hiring a pentester and giving them 'employee level access' would be a needless formality?

People do internal pentests even though everyone knows the pentesters will win; you still learn something from the experience.

j / k navigate · click thread line to collapse

0 pointsAmericanChopper6y ago0 comments

> Working from a point of "I don't trust my employees" is very painful for many reasons.

It’s probably the hardest problem to solve in general, but it’s exactly what a well designed separation of duties is supposed to address.

I have never even heard of an internal site-wide pentest that failed.

dmix6y ago

I'm guessing Coinbase hiring a pentester and giving them 'employee level access' would be a needless formality?

People do internal pentests even though everyone knows the pentesters will win; you still learn something from the experience.

j / k navigate · click thread line to collapse