Technology

57432 readers

3911 users here now

This is a most excellent place for technology news and articles.

Our Rules

Follow the lemmy.world rules.
Only tech related content.
Be excellent to each another!
Mod approved content bots can post up to 10 articles per day.
Threads asking for personal tech support may be deleted.
Politics threads may be removed.
No memes allowed as posts, OK to post as comments.
Only approved bots from the list below, to ask if your bot can be added please contact us.
Check for duplicates before posting, duplicates may be removed

Approved Bots

founded 1 year ago

MODERATORS

[email protected]

384

Microsoft ties executive pay to security following multiple failures and breaches (arstechnica.com)

submitted 3 months ago by [email protected] to c/[email protected]

30 comments fedilink hide all child comments

you are viewing a single comment's thread
view the rest of the comments

[–] [email protected] 1 points 3 months ago (1 children)

That kind of irrational fear of implementing good security is a big part of how bad security happens which leads to breaches.

Doing your work securely should be the norm. Each person should have the least privileged access they need to do what they need.

[–] [email protected] 1 points 3 months ago

The problem is that if you implement security that is too strict, then employees will find ways around it that are even worse than the more permissive method. I don't disagree that people should have the minimum access required to do their job, but if it isn't proprietary then the controls should be relaxed, and if someone requests access to something it needs to be responded to immediately so they are not delayed in whatever they were trying to do.