Notices by Haroon Meer (haroonmeer@infosec.exchange)

I’ve mentioned this before: this is one of the oncoming trains for corp-security. We’ve long failed at least-privilege, but weren’t often punished for it.

Helen in HR (or Bob in accounts) didn’t know what to do with the extra perms they didn’t know they had.

Their agents will.

Many try to mimic skunkworks.

It’s interesting to read¹ Kelly Johnson describe it:

“Skunkworks is a concentration of a few good people solving problems far in advance and at a fraction of the cost of other groups in the aircraft industry by applying the simplest most straightforward methods possible to develop and produce new projects.

All it is really is the application of common sense to some pretty tough problems”

¹ https://amzn.eu/d/6vqEPlW