Default Security

  • Comments posted to this topic are about the item Default Security

  • Given that some people (even in major cities) still don't bother to lock their cars on a regular basis, it is no surprise to me that some don't secure their phone. In fact, people regularly go one step further and have their cars with the doors unlocked, keys in the ignition and engine started to help thieves. If you pay attention many child abductions start with a running car and the kid in the seat.

    Eventually, society might decide that enforcing security is in their best interest. Parents who leave their child in an unlocked running car will get in trouble. People who leave their doors unlocked will get in trouble (or possibly not be covered by their insurance). And... products will have to be secure by default.

    I think back to a product we didn't realize silently installed SQL Server Compact. We then went around to all the machines setting the instance to only be reachable from that machine. While your at it - that would be a great default setting for any database engine. Only bind to the loop back address by default.

  • kiwood - Wednesday, February 20, 2019 7:57 AM

    I think back to a product we didn't realize silently installed SQL Server Compact. We then went around to all the machines setting the instance to only be reachable from that machine. While your at it - that would be a great default setting for any database engine. Only bind to the loop back address by default.

    That is a great idea. Express does this, but others should as well

Viewing 3 posts - 1 through 2 (of 2 total)

You must be logged in to reply to this topic. Login to reply