News for hackers. Stuff that matters.
Re:Insider Trader Had All the Answers by ptsneves on Saturday October 05, 2024 @03:49AM (#41748341)
As a ceo, you just call the IT department directly and that is that. In the it’s just tubes analogy sense, it is all just people at the end of those tubes eventually.
Re:Insider Trader Had All the Answers by warhorse10_9 on Saturday October 05, 2024 @09:38AM (#41749743)
What you just described is incredibly prone to social engineering.
Re:Insider Trader Had All the Answers by ptsneves on Saturday October 05, 2024 @03:29PM (#41752295)
Have real people go to the office of the CEO and have the CEO make the reset request in person. Even by phone a reset is harmless if the computer the ceo is using is known to be trusted and company managed. The defense is in depth not circumstantial to one single phone call or method. You can also authenticate the request through other channels.