3 ms·
Have you thought of using a group password manager like 1Password, Dashlane, etc so you're not copy and pasting a password around the team? Just a suggestion :)
by thebiglebrewski 9y ago
Have you thought of using a group password manager like 1Password, Dashlane, etc so you're not copy and pasting a password around the team? Just a suggestion :)
- jackweirdy 9y agoGood advice for password management but that doesn’t change the fact any internal malicious actor can take the password and be very difficult to identify
- thebiglebrewski 9y agoVery true, but still better than pasting a password around?
- ceejayoz 9y agoThat only addresses one (and arguably the smallest) of the various issues with a shared username/password.
- thebiglebrewski 9y agoIsn't it bad to have passwords in plain text though? Sure, it's a small issue, but it definitely exacerbates the problem. I don't understand why this is earning me downvotes....
- ceejayoz 9y agoYou're proposing a band-aid for a gaping wound. I love 1Password, but it doesn't solve the auditing issues inherent in a single shared account. It doesn't stop an angry employee from changing the email and password to lock everyone else out. It's upsetting that Cloudflare, with their otherwise good approach to security, apparently puts multi-user accounts behind a $5k/month paywall.
- thebiglebrewski 9y agoTrue. I agree with you!
- Artemis2 9y agoWe do use Dashlane and GPG for sharing secrets. In this article’s case I would bet that nobody changed the account’s password because (i) it’s no one’s responsibility (ii) they do not want to disrupt someone else’s workflow.
- thebiglebrewski 9y agoNice. Didn't mean to insinuate that you weren't. Yeah it's definitely not the best thing but some people really do copy and paste passwords around!
- deleted 9y ago[deleted]