Working in a financial institution, I was surprised they could do all this. Our work laptops are so locked down (sometimes maybe too locked down) that we'd never be able to download a random .exe

I think Binance needs to start having IT Security like a bank as well.

▲

cityofdelusion an hour ago | parent | next [-]

It does boggle my mind as well. I’ve only ever worked in high security industries as a developer, and I’ve never had admin access unless I was on hardware deployment. Limited user accounts, Firewall blocks, Active Directory audits, and full file system and network log audits are the name of the game where I have been. Anything external gets flagged quickly by automation and anything severe gets an immediate phone call. Falling for a pen tester phishing more than once, getting your laptop stolen, and so on can get you on the poor performer list. It just seems obvious for critical domains.

▲

GoToRO 2 hours ago | parent | prev | next [-]

Usually it starts with a locked down laptop, then request after request, you get more rights, even admin on the laptop because otherwise you can't do anything as a software developer.

	▲	gadders an hour ago \| parent \| next [-]
		Most banks give you a crippled version of Admin rights via a 3rd party tool. If you need more than that, tough/you're doing it wrong.
	▲	cityofdelusion an hour ago \| parent \| prev \| next [-]
		Banks, at least in the U.S., are highly regulated and this would be very abnormal and subject to regulatory non-compliance, especially when the bank crosses into “big bank” territory. This stuff is regularly audited internally and externally.
	▲	sitkack an hour ago \| parent \| prev [-]
		You can dev without admin.

▲

Caloric3002Swed an hour ago | parent | prev | next [-]

ah but that is boring, disruptive and too sysadminny. Its like the 90s. Cool companies have macbooks with full local admin. Devs need full access.

▲

plagiarist an hour ago | parent | prev | next [-]

Cryptocurrency is like finding out why financial regulations exist speedrun

▲

TacticalCoder 41 minutes ago | parent | prev [-]

> I think Binance needs to start having IT Security like a bank as well.

I don't disagree but note that apparently a bank in France, Credit Mutuel (and it's Fortuneo online arm), just got robbed of hundreds of millions of EUR: hackers who have beforehand created accounts on Kraken (a cryptocurrencies exchange) and who then wired millions to different accounts, bought cryptocurrencies, and withdraw the crypto.

But the hack was really stealing hundreds of millions from the bank.

So not even banks are safe now.