12:17 Stealing passwords | |
| Category:organization password theft by using social engineering or malware. Rules of prevention rather banal:
Big headache webstudio - passwords from client sites, which are hard to settle History, archives of files and disable shared mail on servere.Otdelnoy pleasantness is some master password, which is suitable to the half sites and is known to managers, developers, their relatives, as well as a brilliant constellation of retired and laid-off employees. Periodically, attempts are being made to walk across the portfolio and change, finally, the master password to something better, which usually strike up somewhere in the beginning. The simplest and most elegant way is to transfer the authorization to the server studio, ie in the admin site, you can enter with OpenID (not all, as belonging to the studio domain), so each developer only knows your password, and permission to enter given centrally. Also solved the problem with the journal system, which has finally seen exactly who removed the news, unlike the classical case, when all is done on behalf of some of the "most chief administrator", which is all at the same time by anyone. | |
|
| |
| Total comments: 0 | |