|
|
|
|
|
by Swizec
3544 days ago
|
|
I've worked with many startups. Seeing the security practices of early stage products, I am astounded that anyone gives them data. It's horrifying. Like, right now I have access to some 300,000 phone numbers. All I gotta do is run a shell command and then a SQL query. So can any other engineer in the company. I trust that none of us would use this access maliciously, but how many of our passwords have been leaked in various hacks? What if we're targeted for a hack? What if somebody gets fired and becomes pissy? Hell, what if someone suffers a psychiatric episode and does something stupid? Situation has been the same at every startup I have ever worked at. Anyone who gives their data to an early stage startup is not considering all the implications. Me included. I do it all the time. Gotta have all the shiny tools. |
|