2 ms·
Of related interest to HNers: Admin consoles getting owned up is a fairly frequent way that even security-conscious shops lose their web apps / databases / netw
by patio11 13y ago
Of related interest to HNers: Admin consoles getting owned up is a fairly frequent way that even security-conscious shops lose their web apps / databases / networks, because one often does not code defensively against malicious actions executed by "trusted" users. You can mitigate this quite a bit by putting them on a private network interface and requiring the admins VPN in to use them.
- StavrosK 13y agoAs an easier alternative to set up, you can require SSL client certificates.
- selmnoo 13y agoSpeaking as someone who got owned even when using SSL client certificates (made mistakes setting things up, long story), I think patio11's suggestion is better. Put it on a private network, seriously it isn't that hard.
- StavrosK 13y agoThat's too bad. It's not hard to set up, it's just harder to use.