Hacker News Reader

These stories make me rethink my approach to infra. I would never run AI with prod access, but my manager definitely has a way to obtain prod tokens if he really wanted to. Or if AI agent on his behalf wanted do. He loves AI and nowadays 80% of his messages were clearly made by AI. Sometimes I wonder if he's replaced by AI. And I can't stop them. So probably need to double down on backups and immutability...

View on HN

Design, build an configure your infra in such a way that even if you wanted to destroy it you could not in too fast order. At least the unrecoverable bits and those you can not easily rebuild or replace.

Probably considering yourself as primary expert of system as threat actor is reasonable and thus you should be prevented yourself from being able to do irreparable damage.

> And I can't stop them. So probably need to double down on backups and immutability...

So... you're going to prevent them from getting feedback that they are the clowns in your particular circus? Wouldn't a better idea be to let the idiots in charge get burned a few times until they learn?

Reply on news.ycombinator.com