4 ms·
Yeah that's the first thing a pentest will complain about, had the same problem too. I pushed back enough so that it's trivial to bypass but the bank and pentes
by sunaookami 8mo ago
Yeah that's the first thing a pentest will complain about, had the same problem too. I pushed back enough so that it's trivial to bypass but the bank and pentesters also agreed with me that it's security theater or else I would never had the chance.
- hparadiz 8mo agoI always ask them if they have root/admin on their computer. Then follow up playing dumb with "shouldn't we lock out PCs too?". Watching them stammer is worth the 30 second aside.
- GoblinSlayer 8mo agoLocking down PCs is easy: just set a random password.
- LoganDark 8mo agoJust blow the right hardware fuses and secure boot will be forced with a key that doesn't (or can't) exist.
- JoshTriplett 8mo ago> Then follow up playing dumb with "shouldn't we lock out PCs too?". Unfortunately, some banks do, for various functionality; there are many things you can do via bank apps and not typically via their website.
- huflungdung 8mo ago[dead]