undefined | Better HN

0 pointsbgilroy261y ago0 comments

If factory workers could delete the processes and equipment they work on with the press of a button, they would be bought off too

Paying tech workers high wages reflects the need for them to side with capital when it comes to protecting assets

I had an Ask HN last weekend that did not get any responses but I would still love to learn what governance prevents workers from deleting key software products and their backups because I can't believe boards of directors are not responsible to guarantee product continuity to shareholders

0 comments

3 comments · 2 top-level

iteria1y ago· 1 in thread

What prevents them is sane compartmentalization. Even in accounting it's understood that you cannot defend again things like embezzlement if multiple employees cross different functions conspire, but you can defend against individuals by compartmentalizing their functions making every step further from their function more difficult to execute.

Same with tech. In a mature agency, if random dev has the ability to delete the repo and the back ups, you're doing it wrong. That said, your entire department is a threat you can't avoid. That is what a union brings to the table.

bgilroy26OP1y ago

That makes sense. Treasury and Cash Management have been business functions forever.

The novelty of software engineering from an employee risk standpoint from my perspective was its control over product but in an insurance company, funds are the product too.

joquarky1y ago

> what governance prevents workers from deleting key software products and their backups

Separation of duties, principle of least privilege, and zero trust?

Why would any worker have access to delete both the repo and its backups?

j / k navigate · click thread line to collapse