Collaborate Disseminate
I have been thinking of implementing a new practice where local admin privileges are disabled entirely from all endpoints. For users who need to elevate privileges, they will have a separate admin account dedicated and restricted only to t… Continue reading Is there really any benefit in having a separate local admin account
We’re currently trying to prioritize our mitigations for CVE-2021-44228.
The obvious priority is to deal with any Internet facing java (apache?) applications that use a vulnerable log4j library and\or Java binary first.
For multi-user Linu… Continue reading Clarification on log4j Service Requirements
If someone uses the administrator Windows account for everyday work while having the default UAC settings they will be prompted by UAC whenever an application other than certain predefined system apps requires elevated permissions. From th… Continue reading How is using the standard Windows account more secure than using the administrator Windows account with highest UAC settings?
I need to have security certificates renewed soon on several RedHat servers. Will I need root access to install them?
Continue reading Do I need root access to install a certificate?
Let’s say there is a small organization called "Example" with the registered domain "example.com".
There is a person, Bob, who has full control over the organization’s GitHub account. Bob also manages the organization’s… Continue reading How many emails and accounts an organization’s administrator and developer should have?
I’m the admin for a Windows 10 machine with a few local users. While I understand there are other ways to bypass security with access to the physical machine, I’d like to protect against hacks that bypass the UAC by running some trick of R… Continue reading How do I stop local users from bypassing the UAC on Windows 10?
Someone in my company wants to be granted admin privileges in every single application, infrastructure and network component, just because he is a big IT manager. I don’t have a security background, but it sounds wrong practice. My team is… Continue reading Which security standard or compliance bans admin privileges across all the company systems [duplicate]
Yes, I did read this answer: https://apple.stackexchange.com/questions/192365/is-it-ok-to-use-the-root-user-as-a-normal-user/192422#192422
But I still fail to understand the reasoning behind this advice, as long as we are talking about a s… Continue reading Why is it not recommended to permanently use the root account for all tasks?
I was recently reading through the nmap port scanning documentation and it points out that to perform a SYN scan (-sS) you require root privileges because an unprivileged user cannot send raw packets. Why does the OS not allow an unprivile… Continue reading Why do I need root privileges to send a raw packet from a UNIX machine?
I am considering the security risks to have a standard user added to the Administrators group on an enterprise Windows 10 machine that is dedicated to that user. This is related to security only, so breaking the OS of a wrong manipulation,… Continue reading What are the security risks to have admin rights for a user account on Windows 10?