Do we? What does the average programmer working on internal business applications, b2b services or CMSs have access to that is of any risk?
Do we? What does the average programmer working on internal business applications, b2b services or CMSs have access to that is of any risk?
But I would guess that programmers at Tinder/Grindr/$datingSite had access to production data in the early days. Probably many SaaS things, perhaps doing stuff in the HR/recruitment/time reporting area. For B2B I'm guessing many programmers have access to business sensitive data, that competitors would like to get their hands on. At the least I would guess that at least the average backend developer have access to all contact info / emails for all users in services they work on.
Obviously all best practices say that random Joe programmer shouldn't have access to these things, but I don't think that match the _average_ reality.