Jump to content
EduGeek EdSec 2026 is Go! 27th Oct in Derby! Join us for a day of EdTech security focused talks, networking, and an evening social ×

Primus

Members
 View Profile  See their activity

  • Posts

    2,232

  • Joined

 Content Type 

Everything posted by Primus

  1. Primus
    Only if you look at it in this way. To flip this on its head, it's a good opportunity to test that your strategy really is the best it can possibly be by considering all the options fully and justifying through that process the option that is selected.
  2. Primus

    £500 Gaming pc

    Primus replied to steveg's topic in Hardware

    It's only sense if you have the budget to back it up.
  3. Primus
    If they're managed Chromebooks set the default download location to Google Drive.
  4. Primus
    My point is more regarding data protection than anything else. If you're a student logged on with a teacher account then there's a lot of data accessible and that's now a data breach.
  5. Primus
    And it does nothing to prevent shoulder surfing - attacks are not only external.
  6. Primus
    It depends on your needs but the basic Unifi switches are excellent value for money - they're not core switches but as edge switches they're very very hard to beat IMO.
  7. Primus
    Like I say I've used it for a very long time in plenty of very different locations and never had the issues people on here are reporting. Family members use it all over the country and also haven't had these issues. Have you reported your issues to VM and given them an opportunity to resolve them (I know this can be difficult with most companies but if you are persistent you normally can get through to someone who knows what they're doing in most companies).
  8. Primus
    Best practice is that ALL staff acounts have effective MFA enabled on them not just admin accounts.
  9. Primus
    Respectfully, you are being ridiculous. For MFA to work you need to use multiple effective challenges - a password, an app on your phone, a security USB key etc etc. Relying solely on a password and the domain status of a device is not effective MFA.
  10. Primus
    Agreed, the directory has massive value - disabling it or crippling it by changing names etc will make it pointless.
  11. Primus
    The Unifi switches are so cheap you can create your own warranty by buying spares and having them ready to go - price it up and you still save a fortune.
  12. Primus
    Yeah that's valid, that's why our username format for students is different to that of staff and quite distinctive.
  13. Primus
    Excluding a device because of it's domain status or IP address is not effective MFA.
  14. Primus
    Shock - teachers are real people and have real names.
  15. Primus
    It is better to not overly lock down valid methods of communication - fine teach them how to use email but locking it off until you get to those lessons is a massive overreaction. As is panicking because teacher emails can be seen.
  16. Primus
    Ok so situation for you - I'm a kid, I watch the teacher type their password in. Later I go to a domain joined device and log in as them - proper MFA would have prevented this, using the device as a factor doesn't.
  17. Primus
    Wow, students can't email teachers from their school account? That's totally ridiculous. Once again even if you could remove it their email addresses are likely to be easily guessable. You are searching for a technical solution to a problem that is not technical.
  18. Primus
    No way would we allow students or staff who have left to keep their school email account beyond their leaving date. We sometimes re-enable them if they need something but that's very short term. People with no current connection to the school shouldn't have school accounts - how would you deal with misuse?
  19. Primus
    Ubiquiti every time.
  20. Primus
    Send a letter, put it on your website etc etc that staff will not reply to parental emails. In this time of working from home, blended learning etc do you really want to stop students emailing staff from their school accounts?
  21. Primus
    Have to say I'm shocked how many people aren't happy with VM - I've had VM for years and it's been stunningly reliable in a variety of locations (as I moved house etc.)
  22. Primus
    Why on earth would you want to stop students from seeing the member of staff's work email address? Unless you're using randomly generated addresses it'll be guessable anyways.
  23. Primus
    But defeats the point of MFA.
  24. Primus
    Really all your staff accounts should be using MFA, they'll get used to it but the security it provides outweighs the inconvenience 100 fold. P1 isn't necessary since excluding an IP address or range is compromising its effectiveness anyway. Also yes give him a separate admin account.
  25. Primus
    Thanks!
×
×
  • Create New...