Collaborate Disseminate
I have an application that currently keeps a few properties from a user’s profile in session storage for the app to use when necessary. We don’t keep sensitive data like username or password or ssn in session storage, but we do keep proper… Continue reading Using SessionStorage for Some User Info
Are there any implementations (such as Active Directory) that have applied separation of duties to user account creation, which would require the create user account task and approval task to be done by two different users?
… Continue reading Separation of duties for user account creation
Today I heard at Uni something that broke my mental model about separation of users’ rights. Namely, I heard that:
I can freely debug all programs I have the permission to run, even those that have setuid set to root.
T… Continue reading How can utilities with setuid set to root be secure if they are debuggable?
How easily can admin users access the data of other users’ running processes on Windows 10?
Especially webpages loaded by Chrome.
Example
Context
Bob and Alice share a single Windows 10 installation.
Each has their own p… Continue reading Win10: Access other logged on users’ memory
I’ve been working on my first project, and my initial registered users haven’t been particularly sticky. I’d like to send them an email with some news and information and have them be instantly logged in when they hit the call-to-action li… Continue reading Anything particularly wrong with putting an auth code in marketing emails?
Many IT admins have been faced with a barrage of issues with managing Mac® users and systems as they have been upgrading their macOS® systems to High Sierra. One such issue is that High Sierra makes it difficult to turn on FileVault®, a … Continue reading High Sierra and FileVault® Compatibility Issues
The changing landscape of IT is giving organizations new opportunities to address compliance. One area to consider is IDaaS and the HIPAA Security Rule. The core of any compliance initiative is controlling user access to maintain and secure an organiza… Continue reading IDaaS and the HIPAA Security Rule
Now more than ever, the IT market is fluctuating in a state of change. The source of that change is a seismic shift from on-prem, legacy solutions to the cloud and new platforms, followed closely by an influx of mobile users and new devices. This progr… Continue reading Identity Management Capability Mac® System Management
Is a hosted identity cloud useful to IT organizations? Well, it mostly depends on what your organization needs. Many IT organizations are shifting from on-prem identity management infrastructure to cloud alternatives. Due to this, a hosted identity clo… Continue reading Hosted Identity Cloud
Many IT admins are encountering macOS® High Sierra authentication errors with FileVault® enabled. This problem is completely breaking the model and the processes that IT organizations use to manage Mac® users and systems. While the issue… Continue reading High Sierra Authentication Errors with FileVault®