3 ms·
I remember suggesting to our security admin to add a 'honeytoken' user to our production database in case it ever got owned. At least you would know you were o
by snarfy 6y ago
I remember suggesting to our security admin to add a 'honeytoken' user to our production database in case it ever got owned. At least you would know you were owned.
- jacquesm 6y agoThis is good practice. Extra points if you insert them regularly so you can tell when you were owned.
- IncRnd 6y agoGreat idea! Decades ago, we would do this when selling lists of (voluntary) subscribers. We would seed the lists with our own secret monitoring names and addresses in order to track the use and misuse of the lists. It's a shame that these simple things need to get reinvented constantly. Sometimes, people see differences when they should see similarities.
- toomuchtodo 6y agohttps://en.wikipedia.org/wiki/Trap_street https://en.wikipedia.org/wiki/Trap_street
- IncRnd 6y agoWe used those as well.