4 ms·
At my company this would be auto-flagged and you’d have the intrusions team on your ass inside of 5 minutes. :D
by hamburglar 5y ago
At my company this would be auto-flagged and you’d have the intrusions team on your ass inside of 5 minutes. :D
- vuln 5y ago“But I saw it on hackers news and installed via homebrew.” /s
- jclulow 5y agoIf they don't want you to fling binaries into your home directory they should just mount it noexec. At any rate it doesn't seem like a fantastic security/ability-to-work trade-off. Limit the privileges of the account or you're one exploit away from trouble.
- hamburglar 5y agoMany redundant layers are used to prevent and/or detect security violations, but “don’t install random binaries on prod machines” is a basic tenet. If you need certain tools to do your job, deploy them via proper controlled and audited mechanisms, not via scp.