News for hackers. Stuff that matters.

A comment on SolarWinds hack was 'largest and most sophisticated attack' ever: MSFT president. Parent comment

Re:SolarWinds hack was 'largest and most sophisticated attac... by easton on Monday February 15, 2021 @12:15PM (#26144702)
I'm always curious about solutions to 2, so what does unfettered mean in this instance? Audited? Someone always needs root or Domain Admin or whatever to get the company out of a mess, so do we just heavily audit those accounts and hope they aren't a enemy agent from Pepsi trying to get our secret formula?
[ Parent | on HN ]
Re:SolarWinds hack was 'largest and most sophisticated attac... by throwawayboise on Monday February 15, 2021 @02:08PM (#26145993)
People don't need root access all the time. You can construct a system whereby elevated access is granted as needed with the approval of another person or persons. Logged and time- or task-limited of course.

Inconvenient? Yes. But sometimes appropriate.

[ Parent | on HN ]