By that I mean changing all the passwords and refusing to disclose them in a desperate gamble to 'win.'
You're viewing a single comment thread. View all comments, or full comment thread.
Comments (27)
sorted by:
@.@ I'm afraid you've lost me...PKI?
Public Key Infrastructure. It uses a physical card that the user inserts into a card reader, and then they enter a PIN that is associated with the card. Any access within the system is controlled by granting access to a specific user account through Active Directory etc.
There are no passwords that can just be shared around, because that would obviously be a huge security vulnerability.
In the .Mil world, they are known as Common Access Cards. So the first thing you do every morning is to whip out your CAC and stick it in.
Yep. That's how I know about it.
You mean the CAC Card?
After entering the pin number, and going to the atm machine.
so there are no points of failure in Active Directory or other systems that could be locked down by bad actors?
not trying to be a doomer or a pain, btw, just exploring possibilities.
If you have physical access to the media/machine in question, you're basically 90% there to having full access to everything.
fair, just considering angles.
Not really. Disgruntled employees are always a security threat, even in normal times. The systems are set up to be protected from them as much as they are protected from outside actors.
Edit: and no worries. Asking questions is the best way to learn things.
alright, thank you for patiently explaining this to someone ignorant on the matter.
basically a hardware dongle