There’s an old security mantra that says “always change the defaults!” Although this seems like a good general rule, in fact it’s true only for certain kinds of settings. Changing the defaults in other cases will just end up biting you in the end with little increased security to show for it.
A few months ago I was onsite at a favorite customer’s of mine installing a big new software program that would be a mission-critical component of the security environment. I had installed this program hundreds of times over several decades. Occasionally, I’ve run into install errors or other issues that I had to troubleshoot. Rarely did it take more than a day to figure out the problem and move on.
