Collaborate Disseminate
So the scenario is that we have a server shared with a number of users, with me being the server administrator and able to determine permission assignments.
The server is running a service on loopback interface which is only protected by a… Continue reading Is TLS needed on loopback for local security?
What are useful readings for a novice trying to understand Identity and Access Management? Those may include overviews, theory, deployment, etc. Non-technical discussions and case studies are especially appreciated. Thanks!
What are useful readings for a novice trying to understand Identity and Access Management? Those may include overviews, theory, deployment, etc. Non-technical discussions and case studies are especially appreciated. Thanks!
What are useful readings for a novice trying to understand Identity and Access Management? Those may include overviews, theory, deployment, etc. Non-technical discussions and case studies are especially appreciated. Thanks!
SCIM is a protocol for on- and offboarding of employee accounts in external systems (e.g. e-mail systems, HR- and payroll, etc). While elegant, there is a non-zero cost in setup and maintenance of SCIM integrations between systems.
Exter… Continue reading To SCIM or not to SCIM [closed]
I’m managing a small remote team. We care about security and I want to be sure that our MacBooks comply with at least basic security standards, such as CIS benchmark.
These are the ways I see I could approach this:
Writing up policy docum… Continue reading How to non-intrusively monitor my team’s MacBooks secure configuration?
Today I found a website which generates a fake profile when asked if said profile exists. Example: www.site.com/user/mycoolname doesn’t exist yet. But if I put it in the browser for the site I get a fake profile of mycoolname with no pictu… Continue reading Is it safe for website to generate fake profile pages?
A question I came up with while reading in my information security class. Let’s say website ABC which uses username and password combinations to authenticate users and has a user John. When John goes to ABC.com to log in to his account and… Continue reading Are hashed passwords transferred to a server for user authentication? [duplicate]
In a multi-tenant application, I’m thinking of the right way to let a tenant add users to its account. Assume the "root" user (that signed up and created the tenant) already exists. At some point, the "root" user or oth… Continue reading Securely adding new users to account
I’m creating a subscription-based desktop application, but there is no authentication on the platform as the "user" is the computer upon which the application is installed. This means no user sign up nor login.
I thought of an ex… Continue reading Is there a secure way of handling online payments without user accounts and logging in?