• 0 Posts
  • 174 Comments
Joined 1 year ago
cake
Cake day: June 12th, 2023

help-circle


  • If this lets you monitor the patch status of the end clients in your org, then it’s actually cheaper than existing solutions used for managing regular Windows updates.

    The only questionable part is how reliable, trustworthy, and secure is 0patch themselves?

    Allowing a third party access to patch system level files opens the risk of a rootkit install. (In fact their agent being able to access system would function much like a rootkit itself).

    They could easily backdoor something into thousands, or even tens of thousands of PC very quickly. Make a huge botnet, steal data, etc, etc.

    Assuming they are trustworthy themselves, if their security is compromised, either from hackers or even a rogue employee, the same results could happen and could take a long time to discover.











  • …it won’t let me edit my other comment but I wanted to add that YES using MFA is demonstratively far more safe than any password you can set.

    With a multi factor enabled you could literally give your password out and people could not access your account without being able to complete that second layer of security.