Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

有个小小的建议。A little suggestion #63

Closed
cyxnzb opened this issue Aug 16, 2022 · 1 comment
Closed

有个小小的建议。A little suggestion #63

cyxnzb opened this issue Aug 16, 2022 · 1 comment

Comments

@cyxnzb
Copy link
Contributor

cyxnzb commented Aug 16, 2022

作为一个全功能性的平台,安全性应该是很重要的,毕竟在平台的使用中,很多功能都要牵涉到多机器的集群式部署、计算等等,有些甚至需要内外网调用,因此,个人拙见作者可以在相关功能上,做一些敏感操作预警
例如:

  1. 登录的时候对 登陆地点,时间进行比对
  2. 训练任务发布的时候进行比对
  3. 修改密码的时候身份比对
  4. 敏感操作可以绑定社交工具或者短信sms进行提醒等等

As a full-featured platform, security should be very important. After all, in the use of the platform, many functions involve multi-machine cluster deployment, computing, etc., and some even require internal and external network calls. Therefore, personal In my humble opinion, the author can do some sensitive operation warning on related functions.
E.g:

  1. When logging in, compare the login location and time
  2. Compare when the training task is released
  3. Identity comparison when changing the password
  4. Sensitive operations can be bound to social tools or SMS for reminders, etc.
@cyxnzb
Copy link
Contributor Author

cyxnzb commented Aug 16, 2022

因为早前我的机器是内网穿透部署的平台,出现了疑似通过frp进行渗透攻击情况,所以对安全问题还是比较警觉的,加上现如今挖矿还是较为流行,因此作者也最好尽可能杜绝这种任务在平台上进行。
Because my machine was a platform for intranet penetration deployment earlier, there was a suspected penetration attack through frp, so I was still more vigilant about security issues, and mining is still more popular now, so the author should do his best It is possible to prevent such tasks from being carried out on the platform

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants