Comment by knowitnone
Comment by knowitnone 10 months ago
If it's internal, did they really need to have auth?
Comment by knowitnone 10 months ago
If it's internal, did they really need to have auth?
The term of art is "Friendly fraud".
A significant amount of product stolen from retail stores actually goes out the back door.
> If it's internal, did they really need to have auth?
Nothing on a network is truly internal. The moment you break the physical link between metal and man you're in an unintuitive, and thus insecure, state.
YES!!! You need auth to prevent employees from looking up sensitive user data without a good reason, or it'll be a stalker's haven. And to prevent possible intruders from gaining more data/access. Defense in depth. And for preventing an experiment from wiping use data. And for so many other reasons!