Tag Info

New answers tagged

0

In terms of sessions management, you got things right. However, there is more aspects to Django Application Security that I would suggest you to have a look at. My recommendation is to install and research the middleware module 'django-secure', and have a look at it's security enhancing options. Here are some suggestions: SESSION_COOKIE_HTTPONLY = True ...


1

Obviously, if an attacker manages to get any foothold on the network, they'll be able to move laterally just as easily as you can. But if you understand that and want to accept the risks: Configure SSH to use PAM (UsePAM yes in /etc/ssh/sshd_config), then put the following in /etc/pam.d/sshd: auth sufficient pam_permit.so This will immediately grant ...


2

Assuming OpenSSH, you can (still, but not by default) use HostbasedAuthentication which is the same (fragile) scheme used by classic rsh/rhost before ssh was invented. Namely, if the client IPaddress maps to a hostname listed in a server system or user config file, the connection is accepted. This relies on correct and available rDNS for your local/trusted ...



Top 50 recent answers are included