undefined | Better HN

0 pointsImPostingOnHN1y ago0 comments

Your own expectation is covered in the second paragraph of my previous post, I am describing the expectation, which is what I and the other poster have described. You speak of this as an assumption, but you have it backwards: given google's history of failing to meet our expectations, we assume they will continue to fail to do so.

Your question of "why" boils down to asking, What is to be gained by employing the principles of least privileged access, as well as proper authorization, auditing, and alerting? The answer to that question is beyond the scope of this post, but I trust that you understand or can understand the benefits of these principles.

0 comments

randomdata1y ago

> I am describing the expectation

Yes, the expectation is that Google, and therefore its agents, are trustworthy. You would not give them your information otherwise. Who happens to working at Google at some moment in time is irrelevant. You have chosen to entrust an entity with a revolving door of individuals. Absolutely no expectation of who will access the information is defined, fundamentally. If that is important, you must go to the individuals directly.

You might assume that Google will "do the right thing" by working to keep the information away from those who don't need it, but that is entirely up to them. Hell, they might even do that, but then cycle all of their agents through positions where access is needed... In the end, if they choose not to, nothing about the trust expectation has changed.

ImPostingOnHNOP1y ago

> Yes, the expectation is that Google can be trusted.

That is your expectation, not the expectation. 2 people have told you what the expectation is. You, 1 person, have shared that you have a different expectation. This is okay, but you aren't speaking for us, or for the majority here, only yourself.*

The expectation is the one that we have cited, nothing less. It's great if they meet your expectations, but that's not good enough for us.*

Speaking only for myself here, I believe there's a reason that the principles I cited exist, rather than 'the company lets any employee access anything with no permission or record of it'.

* – paragraphs void and I am wrong when majority changes: I've gotta listen to the people, too! ;)

randomdata1y ago

No witnessing of a a person telling anything of the sort has occurred. Software has made a suggestion of that nature. Let me ask, software, how has this confusing software as a person managed to occur?

Furthermore, getting back to the topic at hand, expectations in an exchange cannot be defined by an individual. They must be defined and agreed upon by all acting entities. Google has made its end of the exchange clear with no evidence of wavering just for Nintendo, implying that Nintendo shared in the standard list of expectations.

1 more reply

j / k navigate · click thread line to collapse

0 pointsImPostingOnHN1y ago0 comments

0 comments

randomdata1y ago

> I am describing the expectation

ImPostingOnHNOP1y ago

> Yes, the expectation is that Google can be trusted.

The expectation is the one that we have cited, nothing less. It's great if they meet your expectations, but that's not good enough for us.*

Speaking only for myself here, I believe there's a reason that the principles I cited exist, rather than 'the company lets any employee access anything with no permission or record of it'.

* – paragraphs void and I am wrong when majority changes: I've gotta listen to the people, too! ;)

randomdata1y ago

1 more reply

j / k navigate · click thread line to collapse