3 ms·
Your opportunity for vengeance on something like that is to have it put up a big warning that says "This setting is dangerous and violates the guidance of the f
by Hizonner 4y ago
Your opportunity for vengeance on something like that is to have it put up a big warning that says "This setting is dangerous and violates the guidance of the following long list of experts and government bodies: list goes here. Are you SURE you want to take this security risk?".
And don't forget to log the insecure configuration every time the system starts up, too.
- DaiPlusPlus 4y agoIf you do that, you'll get dinged in your performance review for being insubordinate.
- doctor_eval 4y agoThis is the germ of a good idea. I don’t do that kind of work any more (building and selling enterprise applications) but I suspect that the way to push back is to have a document they would need to sign that transfers all associated risk to the customer. The people in charge of these companies couldn’t give a shit about research or actual good practice, but dear god they hate taking responsibility for stuff.