Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

It really irks me to see leaked screenshots of internal tools.


On the other hand, this "leak" is very good news for Amazon, right before a major day for Apple. The tech journalists will have to cover the Amazon story, thereby eating into their Apple coverage.


That is a bit too convenient.


I would not be surprised if every employee that did this query recently is getting a nice chat from corporate security.


You're assuming that the interface audits access.

The vast majority of the internal tools I've seen have not audited, they are utilities that are built for a specific purpose and it's not anticipated that someone would leak information out of it.

To me, that looks a bit like a SSRS (SQL Server Reporting Services) report. If so, unless they've gone to great lengths to audit access... it isn't audited and the web server logs aren't going to help.

I'm with enneff on it irking. But at the same time, I would rather occasional disrespectful leaks like this than locked down environments that would prevent whistleblowers exposing the really bad stuff that happens (not in reference to AMZN, just in general).

That's why it irks me personally, not because I care about this data, but because it's irresponsible and disrespectful and helps to bring in the kind of culture that makes it harder for the whistleblowers to operate in when it comes to things that should be leaked.

I've probably phrased the last part of this post appallingly.


> "You're assuming that the interface audits access."

Former Amazonian here - Amazon's internal tools are not part of the vast majority, I'll tell you that much. I have no insider information, but it would not surprise me at all if whoever leaked this got a nice chat today.


It doesn't have to be some elaborate audit functionality. Every reasonable internal application has to have access control and at least some basic logging in place. Based just on that you can already infer a lot.


Isn't that why you walk over to someone's random unlocked workstation and take the screenshot from there?




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: