[eluusive]

I'm so glad I left my previous job. As an SRE, I had to use about 10 tools regularly, and they all had 2 minute timeouts with "SSO" + 2fa. I literally spent about 30 minutes out of every hour just logging in to shit.

The security team wouldn't budge things up to 1 day even.

When you have 2 or 3 factors on every tool -- even things like prometheus. It gets excessive.

[linksnapzz]

Security has no responsibility towards production, just for preventing breakins. Ergo, their process will always ratchet towards not letting anyone do anything.

Engine of a lawnmower, brakes of a Rolls-Royce, etc.