3 ms·
I run a 2-3 person shop working on SAAS and iOS apps. We don't use VPN, because most of the communication goes through HTTPS anyway (github, gmail). I just mad
by kolinko 12y ago
I run a 2-3 person shop working on SAAS and iOS apps.
We don't use VPN, because most of the communication goes through HTTPS anyway (github, gmail). I just made sure that everyone has 2FA and strong passwords on key services.
Oh, and don't download user data to your machine.
- mobiplayer 12y agoHow do you "make sure" they've got strong passwords without compromising password security for those people? Do you just have their word, hear them press many keys when authenticating, ...?
- falcolas 12y agoIn our case, we run the widely available password cracking tools and rainbow tables against our stored passwords. If we can get them, those users are notified and their passwords reset. Yes, we leave any salts and hashes in place - it limits the checks we can reasonably make to the usual password lists but it still catches a large number of poor passwords.