Comment by parliament32
13 days ago
Endpoint DLP helps but it's not even close to bulletproof. Just for fun, if you have DLP at work, open the integrated browser in VS Code and notice how you can send protected test strings without anything chirping you.
> CC numbers are in the clear anywhere in the first place
Sounds great in theory, until you realize that in a large number of industries the majority of employees need access to protected data to do their jobs. Imagine telling the IRS their employees can't see/use cleartext SSNs.
As for paper / mobile phones / whatever.. you're not wrong, but physical security is typically someone else's job.
Network DLP is also not bulletproof so I'm not sure what the argument is there. These things are all best effort.
> if you have DLP at work, open the integrated browser in VS Code and notice how you can send protected test strings without anything chirping you.
I recognize it's not instrumented, but how are protected strings getting there in the first place?