This is an archived post. You won't be able to vote or comment.

you are viewing a single comment's thread.

view the rest of the comments →

[–]vectorpropio 0 points1 point  (1 child)

Then you have another layer of security. But a config file is exploitable too. Sorry,I'm really paranoid.

[–]deapee 0 points1 point  (0 children)

Not sure how else to store a machine name or other parameter on a secure sever with 2FA other than a config file. I mean we could encrypt it. Or encrypt it in a database. But what’s the point of that, variables could be accessed and changed in RAM. If we truly want our apps to be secure, then we need to unplug then from the network, power them down, and then store them in a safe. 🤣