blank429384jf
blank429384jf on Hacker News
no offense taken. i shouldnt have included password resets in my def. it muddied the conversation. covert is part of a def, at least sometimes, but i think its still acurate to drop it. consider a machine with two copies of ssh running, one of 22 with authentication and another on 2222 with an automatic root login. the instance on 2222 would be considered a backdoor, even though its barely hidden. Swap the ports and it's an unauthenticated frontdoor, but i'd still call it a backdoor and expect everyone to know what i mean. the important part is its bypassing securit, not that its hidden.
Password resets aren't "backdoors" unless they contain a flaw the defeats any security protections. It's not just that the backdoor is less secure than the front, the backdoor has no security or is so easily defeated the security may as well not exist.
I'm surprised the hidden aspect of backdoor is so forward in folks minds. In my thinking nothing in cyber security is hidden, I drop the obviously present hidden part of backdoor definition when it's used in yhe cyber security context.
I'm probably mistaken, but I've always referred to password resets as backdoors. Is there another term they could be classfied as?
backdoor means a secondary access point that defeats the security features of the primary. In the door analogy, the home owner spends a ton on a lock and camera for the front door but doesn't even have a deadbolt on the back.
A couple inches? NOAA was forcasting record flooding days before the storm. Local news in the Triangle were showing pictures from the 1916 Asheville flood and saying this storm was going to be worse. There were mandatory evacuation orders all over.
The severity of the situation leading up to the storm wasn't lost on me. We need to understand how people didn't get the message, or didn't believe it if they did get it, or got it and believed it but didn't have an option to leave. Those people didn't have to get stranded.
A friend has a kid in a school in Boone. The school didn't officially close until the storm was almost over them. My friends kid wasn't going to leave because they didn't want to miss a test. My friend pulled their kid out of their apartment in the middle of the night as the flood waters started rising. My friend knew what was happening, but the school officials didn't? That kind of ignorance is excredible dangerous.