Skip to content

Latest commit

 

History

History
4 lines (4 loc) · 801 Bytes

the-list.md

File metadata and controls

4 lines (4 loc) · 801 Bytes
  1. You must not expose LAN workstations RDP port to the internet directly. Regardless of what port number you use, they will be found, they will be probed, and you will eventually get cryptolocker'd because of a temporary password reset that is too weak, RDP vulnerability, etc.
  2. You should not put a list of the plain-text SQL Admin passwords of your clients on the company sharepoint because you don't like asking the DBA's for support.
  3. You should not have all domain user passwords set to their phone extension (3 digits) so that a manager can get into needed files "just in case" the employee is not at their computer.
  4. You should not tell the client that they will be getting new laptops in 2 weeks when your procurement team can't get them delivered to your asset management team for 3.