logoalt Hacker News

billyp-rvatoday at 12:20 PM1 replyview on HN

The engineer could be fixing an emergency issue while on vacation. For financial data, that would hopefully be an auto-deny anyway until someone on-site whitelists their IP. And this is if they aren't using VPNs. Adding AI to this party feels like it wouldn't really help.


Replies

insanitybittoday at 1:15 PM

> The engineer could be fixing an emergency issue while on vacation.

Okay, but that's why there are always loud "breakglass" escalation options for access.

> that would hopefully be an auto-deny anyway until someone on-site whitelists their IP

About as far from "zero trust" as any solution could be.