mikem
  • Member for 1 year, 5 months
  • Last seen this week
How to get medical vendors to take security seriously?
Accepted answer
3 votes

I'm doubtful this is something the infosec community can change. Healthcare is too specialized and the devices are typically proprietary closed black boxes. You could develop a set of security ...

View answer
Should I compile as root?
2 votes

There should be no reason to ever compile as the root user. Even if the package will ultimately be run as root, that shouldn't have anything to do with compiling. If you must compile as root to get ...

View answer
Can a powerline network adapter be more easily used to listen to traffic on another router?
1 votes

The powerline adapter is plugged into a switch port on the airport. Since it's a switched port, only traffic destined for the powerline adapter segment would pass... plus some broadcast-type traffic. ...

View answer
OTP vs two-factor
1 votes

OTP is either one-time, or it isn't OTP. I think this is what your vendor is telling you... they aren't OTP, just 2FA. OTP isn't just time-based. It's also "service" based. What I mean by ...

View answer
Logging SSH commands on Linux - is custom kernel the only way?
1 votes

We use a Privileged Access Management (PAM) program to handle access control. Not only will it control who can run ssh remote commands, but it will also log it immediately... who ran what command on ...

View answer
How do very big companies manage their most important passwords / keys?
1 votes

Most large customers I've worked with -- several with more than 20,000 unix hosts -- simply don't trust passwords on their own. Think large finance, energy, and other highly regulated industries. ...

View answer
Is there a good reason (and what can it be) to require DAC restriction on IPC in addition to SELinux rules?
1 votes

World-writable files are pretty much considered bad in all but very specific scenarios. If there is no legitimate reason to have a file wide-open for the world to read/write to, it's best practice to ...

View answer
What's more vulnerable; the data or the DBMS?
0 votes

The data is the vulnerability because it's where the value is. The database engine itself holds little value, unless the data stored in it is easy to read. Crooks aren't after the database... they ...

View answer
How can I protect me from... myself?
0 votes

We need more information on the use-case. Like, are you simply trying to protect yourself from accidental changes to the file or from external malicious changes to the file? If you really want to ...

View answer