What are You Working on Wednesday

⁨6⁩ ⁨likes⁩

Submitted ⁨⁨1⁩ ⁨year⁩ ago⁩ by ⁨shellsharks@infosec.pub⁩ to ⁨cybersecurity@infosec.pub⁩

Weekly thread to discuss whatever you’re working on, big or small, at work or in your free time.

source

Comments

Sort:hotnew top

NonDollarCurrency@monero.town ⁨1⁩ ⁨year⁩ ago
Weak active directory password auditing. Going to be great fun for service desk once the forced password change occurs.

source
Wisens@discuss.tchncs.de ⁨1⁩ ⁨year⁩ ago
I’m writing QA tests to test an improved user experience with one of our security tools.

I’ve worked on security teams that live by security first and user experience a distant second or third priority. We as security still have to keep in mind that if business processes break, or if the user experience is too poor, then leadership and users will do everything they can to circumvent or get exceptions for the control.

What do you folks think about balancing user experience with security?

source
- shellsharks@infosec.pub ⁨1⁩ ⁨year⁩ ago
  If your UX is bad in favor of better security, your users will tend to find ways to circumvent your security haha. So good thing to keep in mind.
  
  source
- 0xD@infosec.pub ⁨1⁩ ⁨year⁩ ago
  If you add any specific measure I could comment on that, but generally I think that user experience must be taken into account up to a point. You won’t disable 2FA so they don’t have to get their phone, but you implement it with SSO so logging in once is sufficient.
  
  Power users such as admins on the other hand should be able to understand and use higher security measures such as 2FA for every administrative login.
  
  source
floofloof@lemmy.ca ⁨1⁩ ⁨year⁩ ago
Upgrading an authentication system to hash passwords with Argon2.

source
psudojo@infosec.pub ⁨1⁩ ⁨year⁩ ago
Future proofing an A1278 MacBook with Nix, Stow, & ClamAv, pray for me

source
- shellsharks@infosec.pub ⁨1⁩ ⁨year⁩ ago
  Rather than Google it, can you ELI5 what you’re using Stow for? =)
  
  source
  - psudojo@infosec.pub ⁨1⁩ ⁨year⁩ ago
    I’m using stow to organize my dot files
    
    source
alex_02@infosec.pub ⁨1⁩ ⁨year⁩ ago
Going to finish current project and maybe fix somethings in other code. I have several things going on today as well, but should be interesting.

source