I worked on a non-crypto, sensitive financial system two decades ago and similarly the end servers that ran the application stack were severely stripped down Linux instances with no shell, no interface to interact with outside of an application command channel, the hosts that could access that command channel were air gapped, and still the entire thing was wrapped in three layers of transaction auditing that were entirely disassociated from one another (different devs, different access, different source of data for auditing the same record).
I cannot look at how these companies are run with anything but derision. It’s institutional laziness, and it’s sloppy.
I cannot look at how these companies are run with anything but derision. It’s institutional laziness, and it’s sloppy.