Collaborate Disseminate
SCIM is a protocol for on- and offboarding of employee accounts in external systems (e.g. e-mail systems, HR- and payroll, etc). While elegant, there is a non-zero cost in setup and maintenance of SCIM integrations between systems.
Exter… Continue reading To SCIM or not to SCIM [closed]
I’m managing a small remote team. We care about security and I want to be sure that our MacBooks comply with at least basic security standards, such as CIS benchmark.
These are the ways I see I could approach this:
Writing up policy docum… Continue reading How to non-intrusively monitor my team’s MacBooks secure configuration?
Today I found a website which generates a fake profile when asked if said profile exists. Example: www.site.com/user/mycoolname doesn’t exist yet. But if I put it in the browser for the site I get a fake profile of mycoolname with no pictu… Continue reading Is it safe for website to generate fake profile pages?
A question I came up with while reading in my information security class. Let’s say website ABC which uses username and password combinations to authenticate users and has a user John. When John goes to ABC.com to log in to his account and… Continue reading Are hashed passwords transferred to a server for user authentication? [duplicate]
In a multi-tenant application, I’m thinking of the right way to let a tenant add users to its account. Assume the "root" user (that signed up and created the tenant) already exists. At some point, the "root" user or oth… Continue reading Securely adding new users to account
I’m creating a subscription-based desktop application, but there is no authentication on the platform as the "user" is the computer upon which the application is installed. This means no user sign up nor login.
I thought of an ex… Continue reading Is there a secure way of handling online payments without user accounts and logging in?
Host vendors are able to change the root password from their portal and perhaps access the machine using it. How can I prevent it? Are there any access methods that host vendors have to gain access to my machine? I know that given the phys… Continue reading How do I prevent host vendors from accessing my host [closed]
This is an edge case, and as soon as multiple users are accessing the AWS Console in anyway, IAM is the only good option, but what if you only have one user?
I’ve always assumed that if only one person is accessing the account, and they ne… Continue reading Is it more or less secure to use IAM (AWS user management) if you only have one user?
Utilizing an identity and access management solution (IAM) with identity governance and administration (IGA) capabilities is necessary for security and compliance in your modern IT environment.
The post What is Identity Governance and Administration (I… Continue reading What is Identity Governance and Administration (IGA)?
I’m currently working for SaaS a company and as part of a security audit we were advised to remove all administrative access from all laptops/end-user pc’s for a Principle of Least Permissions.
Is there any MDM/management software for Ubun… Continue reading Is there an effective way to disable root access on linux in an office setting