3 ms·
Whenever I talk to people about security, I give a simple thought experiment: Assume the passwords for all of your users are public. Doesn't matter how it happ
by brightball 5y ago
Whenever I talk to people about security, I give a simple thought experiment:
Assume the passwords for all of your users are public. Doesn't matter how it happened. How are your users protected?
The moment that people go down this road of thought everything gets a lot better.
1. How do you restore accounts that may have been taken over?
2. How do you detect logins that look like normal behavior vs those that don't?
3. Is a password alone enough to get them in?
If you address those 3 things everything gets A LOT easier for you and your users.