3 ms·
Your Maginot line is only providing imaginary security. Actual IT security is in depth, and the simple task of having an admin account that is not the default
by manicdee 6y ago
Your Maginot line is only providing imaginary security.
Actual IT security is in depth, and the simple task of having an admin account that is not the default user ID makes sense to me.
What zero days are out there that rely on a known user ID, and a known process ID for that user’s first process? You could defeat that by just following the advice from people that know better.
- prepend 6y agoI’m not trying to provide absolute security as it’s for my home network. If there’s a zero day ravaging my kids iPad then that’s the risk I take. And it’s acceptable given my situation. “People that know better” for my situation seems pretty hard to qualify. I’m glad it makes sense to you, but since you have zero insight to my config and the changes required to implement I think it says more about the quality of your recommendations that you can give a recommendation without understanding the usability trade offs. Maginot lines suck for protecting countries, but simple, clear defenses are pretty darn handy for protecting home networks. I’ll take a disconnected NAS over a wonderfully synced, fully compliant NAS following every recommendation (that also includes making it network accessible).