Collaborate Disseminate
I have been observing some unwanted activities & changes in my server by an Admin in our IT team. How do I get solid information on who has been accessing the server and what has been modified, created, installed etc?
… Continue reading How to monitor a server for changes by an admin
The idea would be to prevent an attacker who has stolen a root/admin account or escalated to clear his own activities or even read the traces of what he is doing. Let’s assume we are under Linux, we log with auditd, have cent… Continue reading How to prevent admins to access logs from their own activity?
To make things easier for Office 365 tenant administrators, Microsoft has released four new administrative role for Teams. You can now assign these roles to other people and have them take care of areas like Teams general admin or the more complicated area of voice and audio meetings and calling. It’s a sign of increased maturity in the Teams product.
The post Microsoft Releases Teams Administrative Roles appeared first on Petri.
Continue reading Microsoft Releases Teams Administrative Roles
There are a number of users in the business who are required to perform administrative tasks on machines, not least the IT Service Desk, also Devs etc.
The only requirement for administrative access within our estate would b… Continue reading Principle of Least privilege; is it ever a ‘good idea’ to give standard users administrative privileges?
Currently, I am working on a web application and wanted to let users send emails to others through a web form. So, they just should submit their email address and my web app would then send mails to others with their email in… Continue reading When is an email rejected?
This question already has an answer here:
I’m a 7th grader. The school district I’m in likes to try to make it look like they are the most secure school in the world. I discovered a major flaw in their security system. This was a shell that wasn’t running bash or any other command line language I knew. This was clearly an admin-only thing but I decided to investigate.
Using a simple run command from the help command I was able to view everybody’s password. At the time it was just the same as their username. I knew what could be done if the district’s computer system was compromised. The school district only thought to keep the shell locked from grades 8-12. This leaves an opening, if some person was to get a password from a younger grade, then they could do some damage.
In 2017, I found a different shell. This time it was the CMD in Windows 8. This time it was on shell. I went and typed in netsh. From there I could control all of the network components.
I’ve been thinking about writing a letter to an admin but I don’t know what to say or use as any reason he should care. Should the admin, everyone else, and me be worried about this?
Continue reading Should I be concerned if my school district has a major shell exposed? [duplicate]
the virtual machine Windows 12 r2. It is necessary to limit the launch of programs without a digital signature. Heard about SRP, tried to use, did not work, I do not understand what exactly is needed. I ask for help.
Purpose… Continue reading How to limit the launch of programs that do not have a digital signature?
Context:
Hardened PC configuration of the company by giving a separate admin account to each employee, recorded in his/her KeePass, much stronger than a user-created one (at least 20 chars), so quite impossible to remember … Continue reading Risk of disabling usage of secure desktop for elevation prompt (to allow copy paste admin password) on a Personal Computer?
I can set up my own email server, and quite happy with it, using standard open source components – postfix, roundcube, etc on top of HardenedBSD or OpenBSD.
I’d like to offer the use of my email server to friends and family,… Continue reading How can I ensure higher levels of privacy when hosting others’ emails?
We are 1-3 guys maintaining a fairly large but clumsy developed-in-house website. With around 900+ mysql tables, and a lot of data access code in PHP. Let’s say it is huge amount of code for just 1 or 2 guys to patch them all… Continue reading Is the hosting OS safe to sql injection hackers by hiding admin ID?