Hi,
+1 to Steffen’s idea.
Also, a couple of questions... how can I find out if someone (attempts to) login with my SSO?
Can the RIPE NCC provide a page showing a list of last 5-10-100 (un)successful logins?
How about e-mail notifications (with the IP address of the attacker) when a failed login attempt is made?
Can I get an e-mail notification that someone has logged in, every time a successful login happens?
- I’d like these to be opt-in
Elvis
Hi Ivo,
Thanks for the heads up.
It would be usefull if a LIR Admin user in the portal could see if "his"
users have the 2FA enabled. That way I could encourage my colleagues
without 2FA to enable.
CC: to the members-discuss for feedback on the suggestion.
mit freundlichen Grüßen
Steffen Weinreich
--
Wireless Logic mdex GmbH
Bäckerbarg 6, 22889 Tangstedt, Germany
Am 18.02.21 um 16:49 schrieb Ivo Dijkhuis:
> Dear colleagues,
>
> Last weekend, RIPE NCC Access, our single sign-on (SSO) service was
> affected by what appears to be a deliberate ‘credential-stuffing’
> attack, which caused some downtime. We mitigated the attack, and we are
> now taking steps to ensure that our services are better protected
> against such threats in the future.
>
> Our preliminary investigations do not indicate that any SSO accounts
> have been compromised. If we do find that an account has been affected
> in the course of our investigations, we will contact the account holder
> individually to inform them.
>
> We would like to ask you to enable two-factor authentication on your
> RIPE NCC Access account if you have not already done so to ensure that
> your account is secure. In general, using two-factor authentication
> across all your accounts can help limit your exposure to such attacks.
>
> If you notice any suspicious activity in your RIPE NCC Access account,
> please contact us immediately at <security@ripe.net>.
>
> Best regards,
>
> Ivo Dijkhuis
> Senior Information Security Officer,
> RIPE NCC
>
_______________________________________________
members-discuss mailing list
members-discuss@ripe.net
https://lists.ripe.net/mailman/listinfo/members-discuss
Unsubscribe: https://lists.ripe.net/mailman/options/members-discuss/elvis%40v4escrow.net
--
This message was sent from a mobile device. Some typos may be possible.