4 ms·
Honestly my immediate thought was they were scanning them to hack them and keep the data private to use against you. Maybe it's just because I live in the US,
by notch656a 4y ago
Honestly my immediate thought was they were scanning them to hack them and keep the data private to use against you. Maybe it's just because I live in the US, but it's shocking to me a government would scan your server and not exploit that somehow and instead actually privately let you know what it found.
- alias_neo 4y agoUnderstandable, but I doubt they'd advertise it if they were doing that (the link in OP is hosted on their own site). Here's [0] a good example of the guidance they offer, password policy in this case [0] https://www.ncsc.gov.uk/collection/passwords/updating-your-approach https://www.ncsc.gov.uk/collection/passwords/updating-your-a...
- acdha 4y agoThe US government has some similar efforts but they’re mostly focused on government agencies and what they consider critical infrastructure (e.g. the power company can ask for help, a donut shop is probably going to be told to buy a private service). It doesn’t make the news as much but domestic security is legally part of the mission for agencies like DHS and Commerce. https://www.cisa.gov/cyber-hygiene-web-application-scanning https://www.cisa.gov/cyber-hygiene-web-application-scanning