News for hackers. Stuff that matters.
Re:CanaryTrap: Detecting data misuse by third-party apps on ... by snarfy on Friday July 03, 2020 @10:14AM (#23724214)
I remember suggesting to our security admin to add a 'honeytoken' user to our production database in case it ever got owned. At least you would know you were owned.
Re:CanaryTrap: Detecting data misuse by third-party apps on ... by jacquesm on Friday July 03, 2020 @10:17AM (#23724247)
This is good practice. Extra points if you insert them regularly so you can tell when you were owned.
Re:CanaryTrap: Detecting data misuse by third-party apps on ... by IncRnd on Friday July 03, 2020 @01:16PM (#23725702)
Great idea! Decades ago, we would do this when selling lists of (voluntary) subscribers. We would seed the lists with our own secret monitoring names and addresses in order to track the use and misuse of the lists. It's a shame that these simple things need to get reinvented constantly. Sometimes, people see differences when they should see similarities.
Re:CanaryTrap: Detecting data misuse by third-party apps on ... by toomuchtodo on Friday July 03, 2020 @02:57PM (#23726484)
Re:CanaryTrap: Detecting data misuse by third-party apps on ... by IncRnd on Friday July 03, 2020 @06:03PM (#23728028)
We used those as well.