4 ms·
Good point. You can never be more secure than your IT crew. Unless you treat the LAN as hostile, which you totally should.
by ncmncm 5y ago
Good point. You can never be more secure than your IT crew. Unless you treat the LAN as hostile, which you totally should.
- aitchnyu 5y agoHow should I start treating my lan as hostile?
- ncmncm 5y agoFirst, turn off password and root ssh logins to your machine. Treat all the other machines on the LAN as if they have already been suborned. Don't 'ssh -A' to them if it would enable them to log back into your machine. No 'ssh -X' either except from within a VM on your machine, with its own X-in-a-window. I.e., pretend every other machine is out on the open internet. There are new ssh options to keep closer control of credentials.