News for hackers. Stuff that matters.

A comment on A Pentester's Guide: Osint, Breach Dumps, and Password Spraying. Parent comment

Re:A Pentester's Guide: Osint, Breach Dumps, and Password Sp... by mc32 on Wednesday April 10, 2019 @03:51PM (#19628168)
What do you about providers who while they support SAML keep the front door open after setting up trusts?
[ Parent | on HN ]
Re:A Pentester's Guide: Osint, Breach Dumps, and Password Sp... by Kalium on Wednesday April 10, 2019 @04:05PM (#19628279)
You feed your strong preference for SSO into procurement, which can really help cut down on the number of such vendors.
[ Parent | on HN ]
Re:A Pentester's Guide: Osint, Breach Dumps, and Password Sp... by spydum on Wednesday April 10, 2019 @09:19PM (#19630285)
Front door accounts should be vaulted away for when SSO is broken only.
[ Parent | on HN ]