Re:Exposing Tanium: A Hacker’s Paradise
by geofft on Thursday November 30, 2017 @06:02PM
(#15820455)
> Additionally, downloading a client without getting the public key for the server won't help you - you can't just connect to any server you find.
Right. The fact that the client is publicly accessible is a point in the vendor's favor, if anything: the fact that this "auditor" seems to think security-by-obscurity is a good idea makes me question why I bothered to read any of it.
Right. The fact that the client is publicly accessible is a point in the vendor's favor, if anything: the fact that this "auditor" seems to think security-by-obscurity is a good idea makes me question why I bothered to read any of it.