I saw someone familiar walking around my neighborhood. The view from my window is partially obscured by the garden. So as I turn my gaze, I see a man wearing a hat loosely. The hat was positioned far back on his head, exposing a protruding forehead whose silhouette was amplified by a receding hairline. As the man walked by, it looked like a bald mounds pubis floating along the balcony. The things one can see from their home, right? Who the fuck needs social media when looking for a good laugh?
> Give some people an inch and they’ll take a mile.
Even if the company is in microservices, and there is no way they need a mile of clearance, they'll take it anyways. Their greed outsizes their Lilliputian muster.
I can foresee one answer to the question 'why would someone do this?'. It's called a potent cocktail of vengeance and self-destruction. People who self-medicate through harming others are always looking for a way to escalate. Look up the story of UGNazi, and don't skip the ending.
Well, I am one of the many people who theoretically can hack someone's system while not leaving evidences of it, at least not evidences pointing to myself.
I do have people I dislike, and yet I don't hack in their systems to plant false evidences.
If you want to get back at someone, you could just punch them in the face or kick them in the nuts. We live in a world where simple assault results in less serious consequences than hacking.
While I am sure you are competent like most folks on here, I will say this: I have met a good number of people who claim they can "get in and get out un-noticed". In retrospect, I think rarely did they consider the possibilities of observation beyond the actual target system.
My point is this: There is no defense against 0-day/X-day exploits in the wild. But the second best thing against being patched is logging and properly tuned alerting. In my 20-ish years of working in this field I've caught half a dozen attackers/intruders via logs and anomaly alerts. Without those 2nd best things in place the entire network(s) would probably have been compromised.
Some crimes are trivial to commit. Walking away unscathed from committing the crime is far harder than one might think. Consequences are inevitable, one way or another.
I like this article. It makes many good points. The saving grace of the situation is that developers have all the time in the world, so try everything out at the buffet, one at a time.
