Security 101 for SaaS startups

Re:Security 101 for SaaS startups by tarr11 on Sunday March 05, 2017 @04:44PM (#13798893)

Disabling email attachments from your email server is also a good idea.

[ Parent | on HN ]

Re:Security 101 for SaaS startups by itaifrenkel on Sunday March 05, 2017 @04:45PM (#13798899)

Can it be done with hosted mail solutions like most startups use? (Gmail/office365)

[ Parent | on HN ]

Re:Security 101 for SaaS startups by tarr11 on Monday March 06, 2017 @12:15PM (#13804132)

I know you can do it with Google Apps. Have not tried with Office365.

[ Parent | on HN ]

Re:Security 101 for SaaS startups by itaifrenkel on Monday March 06, 2017 @01:12PM (#13804677)

After sleeping on it... I am not sure it would work with managers. They work with outside council on a day2day basis and they use attachments for that. I wonder why gmail hasn't made phishing attachments obsolete.

[ Parent | on HN ]

Re:Security 101 for SaaS startups by tarr11 on Monday March 06, 2017 @01:57PM (#13805057)

If you just blocked zip files, it would be a good start.

[ Parent | on HN ]

Re:Security 101 for SaaS startups by mi100hael on Tuesday March 07, 2017 @06:35PM (#13816326)

Gmail does block quite a few attachment types. Zips are tricky because they're a very common way to send a collection of photos or docs or similar.

[ Parent | on HN ]