Also just having read access is still a problem when the read access is for PII and other sensitive information. You want a 19 year old kid who got fired from an internship for leaking sensitive information to have read access to all your employee data? (Pay, retirement, worker's comp, performance, banking information, and everything else). How about your social security records? Medical records from the VA? The list goes on.
"Also just having read access is still a problem when the read access is for PII and other sensitive information. You want a 19 year old kid who got fired from an internship for leaking sensitive information to have read access to all your employee data? (Pay, retirement, worker's comp, performance, banking information, and everything else). How about your social security records? Medical records from the VA? The list goes on."
"but sources tell WIRED"
Sources told me they never had access. Who do you believe now?
Do you know for sure there are no checks and balances in the system besides what you read in a Wired article?
Well I would tend to believe the news organization that I know has reported accurate things in the past, and which I know has a reputable editorial process, and is accountable for what it publishes, rather than bill99k from hacker news who can just make up whatever shit he wants with no accountability. But that's just me.
Also just having read access is still a problem when the read access is for PII and other sensitive information. You want a 19 year old kid who got fired from an internship for leaking sensitive information to have read access to all your employee data? (Pay, retirement, worker's comp, performance, banking information, and everything else). How about your social security records? Medical records from the VA? The list goes on.