3 ms·
If you are an employee or contractor - your risk is higher than you might think. As an employee, if you do 'non-work' activity on your laptop that compromises i
by czbond 9y ago
If you are an employee or contractor - your risk is higher than you might think. As an employee, if you do 'non-work' activity on your laptop that compromises it's integrity - you could be at actual monetary/legal risk. I would highly recommend you have one. Also, as a contractor you run a higher risk. With Mac, configure your built in firewall. Run a "paid for" version of Bitdefender or other. Use VPN ad blocking. Use LTE connections, not wi-fi, for VPN connections.
- drdaeman 9y ago> Use LTE connections, not wi-fi, for VPN connections I'd get it for non-VPN, but for VPN connections - how does it matter? As long as peers properly authenticate each other, of course. > If you are an employee or contractor - your risk is higher Higher than whose risk?
- elif 9y agoNo idea if this is was the commenter was implying, but I think the advice is because plenty of apps can send requests in the 1 second initial window as you authenticate your VPN. In theory, that could be sensitive data or enable a sophisticated attacker to correlate you with your VPN exit (if you were using it for pseudo-anonymity). I don't think key negotiation is compromised in any way...
- czbond 9y agoGreat question. For 'in flight' connections like a VPN, it is harder. I would most likely try to be "same network"... so I'd find them at a coffee shop and try to compromise the dev machine on the network, social engineer/phish, or if the dev was at home and I needed in, I'd try to impersonate their home WAP, or I'd try compromise their machine to cross a tunnel or look for codebases, etc. Edit: Totally derailed the topic, my bad.
- deleted 9y ago[deleted]