logo

drewdevault.com

[mirror] blog and personal website of Drew DeVault git clone https://hacktivis.me/git/mirror/drewdevault.com.git

new-sysadmin-lecture.md (1594B)


  1. ---
  2. title: New sysadmin lecture
  3. ---
  4. You're a production sysadmin now. That comes with certain responsibilities. In
  5. short:
  6. 1. Respect the user's privacy, and look at only what you must.
  7. 2. Think before you type.
  8. 3. With great power comes great responsibility.
  9. Assorted tips:
  10. - Practice your changes on localhost first.
  11. - Ask for help if you need it.
  12. - Always run your SQL queries in a transaction.
  13. - `SELECT things, you, want FROM x;` is generally better than `SELECT * FROM x;`
  14. when considering the user's privacy.
  15. - Share information on a need-to-know basis, both with people and with
  16. computers.
  17. - Avoid doing things that cannot be undone.
  18. ## Spear Phishing
  19. Because you now have access to production systems, you may be a target for spear
  20. phishing. A bad actor may target you directly in a social engineering attack in
  21. an attempt to get you to leverage your access to mistakenly compromise the
  22. system. For example, someone may impersonate another admin and ask you to add an
  23. SSH key to a server. You need to be aware of this risk.
  24. If you receive a request to leverage your access for any reason, double check
  25. the veracity of the request. Is the person on IRC identified with NickServ for
  26. the correct account? Is the email they sent DKIM signed and verified from the
  27. right sender? If in doubt, ask for a secondary form of authentication, such as a
  28. PGP challenge.
  29. This also applies to normal requests from users - don't let someone impersonate
  30. another user in an attempt to gain access to or manipulate their account. Be
  31. especially careful with requests from users with 2FA enabled.