Obviously this case is detectable, but it's detectable after it happens since permissions weren't correct in the first place.
Who keeps web logs these days? It's all spyware javascript tracking for pretty graph printing.
Plus, any notifications depend on actually instrumenting any monitoring or triggers or processing to even notice your "sensitive" content has been accessed out of context.
(and this is just web stuff. imagine how impossible it is to track who forwards your confidential emails or other internal documents around without your permission.)
> Who keeps web logs these days? It's all spyware javascript tracking for pretty graph printing.
Anyone who needs records of what has been accessed, so larger companies and organisations.
> Plus, any notifications depend on actually instrumenting any monitoring or triggers or processing to even notice your "sensitive" content has been accessed out of context.
Yup. Hence a cron job automatically emailing its result (crude (or simple?) but it would work).
> (and this is just web stuff. imagine how impossible it is to track who forwards your confidential emails or other internal documents around without your permission.)
I don't have to imagine that. This is why DRM exists; document/knowledge management systems should have the ability to allow access to information but not further dissemination. There's still the user education aspect though (and users don't like change...).
Oh, and the insistence of wanting to using external services like Dropbox... gah. "But, but, everyone else uses it!"
But we live in a new world. A world of BYOD and now, in 2015, Bring-Your-Own-SaaS. Employees put content up on company platforms, on third party platforms, on high heel platforms.
The problem of solving data privacy at a _competent_ level across every organization is intractable with so many "just do whatever you want" vibes in the air.
Now, that obviously doesn't happen everywhere, but it happens everywhere until it doesn't. Biggest offenders are usually non-technical offices: sales using 8 hosted platforms for metrics, email, surveys, project management, job hiring, etc. All impossible to actually control at any sane level outside of 340 UI clicks of the mouse across webby webby land.
tl;dr give up and go live in a cave for the next 30 years until all this gets sorted
Who keeps web logs these days? It's all spyware javascript tracking for pretty graph printing.
Plus, any notifications depend on actually instrumenting any monitoring or triggers or processing to even notice your "sensitive" content has been accessed out of context.
(and this is just web stuff. imagine how impossible it is to track who forwards your confidential emails or other internal documents around without your permission.)