3 ms·
While 30 minutes is not a lot by any means, I hope you will take the opportunity to get across a few simple points to them: 1. Patch your systems 2. Use a non
by alltakendamned 10y ago
While 30 minutes is not a lot by any means, I hope you will take the opportunity to get across a few simple points to them:
1. Patch your systems
2. Use a non-trivial, _long_ password. 13+ characters at least. They cannot be easily cracked. Use a password manager and do not reuse passwords.
3. Look out for phishing emails. Just previewing a message without clicking already gives us the password hash
4. Chrome is more secure than IE, iOS is more secure than Android
5. An overview of "smart" crypto choices, MD5 is simply not good enough to save passwords with
6. Assume breach and set up decent monitoring alerts
Following these is already going to give security people, and by extension attackers, a harder time getting into networks and systems.
Yes, this is an extremely simplified view and without even the slightest nuance. But better this in 2 minutes at the end of a 30 minute talk than nothing.