3 ms·
In the comments, the author mentions this: "As for information on our VPN setup (and our mail sending setups), it's on our support site (for obvious reasons) s
by spogbiper 2y ago
In the comments, the author mentions this:
"As for information on our VPN setup (and our mail sending setups), it's on our support site (for obvious reasons) so we assume the attacker read it in advance."
That really changes the level of complexity for the attacker here
- Lord_Zero 2y agoIts just full of bad practices. No 2FA? Why is VPN its own username and password? Why not use a product that can use SSO?