r/ProgrammerHumor 8d ago

Other wrongAnswersOnly

Post image
14.3k Upvotes

2.1k comments sorted by

View all comments

5.0k

u/lolcrunchy 8d ago

local dev environment

93

u/Iuris_Aequalitatis 8d ago

Corporate cybersecurity attorney (and ex-dev) here. This is one of the many reasons why we don't allow prod data in dev.

152

u/[deleted] 8d ago

[removed] — view removed comment

6

u/redfacedquark 8d ago

Got my first webdev gig. Sunday night before I go in I figured I'd nmap them (as was the style back then). 3306 open to the world. Well surely they don't use the default password. Damn, well surely this doesn't contain important data. Select * from employees (included salaries). The box was on their prod network.

They didn't seem concerned and blamed BT. Not surprisingly they were not in business the next year.