News for hackers. Stuff that matters.

A comment on CrowdStrike ex-employees: 'Quality control was not part of our process'. Parent comment

Re:CrowdStrike ex-employees: 'Quality control was not part o... by Too on Saturday September 14, 2024 @12:35AM (#41537480)
In a highly secure environment, don't use long lived secrets in the first place. You use 2FA and only give out short lived tokens. The IdP (ID Provider) refreshing the token for you provides the audit trail.

Repeat after me: Security is not a bolt on tool.

[ Parent | on HN ]
Re:CrowdStrike ex-employees: 'Quality control was not part o... by defrost on Saturday September 14, 2024 @12:41AM (#41537507)
More like a triple lock steel core reinforced door laying on its side in an open field?

Good start, might need a little more work around the edges.

[ Parent | on HN ]