3 ms·

> The whole point is to NOT trust the endpoints to be reliable narrators of what they are transmitting over the network That’s not the goal though. You’re not

> The whole point is to NOT trust the endpoints to be reliable narrators of what they are transmitting over the network That’s not the goal though. You’re not trying to monitor the systems themselves, you’re trying to monitor the people using the system. A financial regulator doesn’t give a crap what your system does, or how it does it. They only care that they can blame (and potentially prosecute) an actual person if it goes wrong. Using middleware boxes makes this easy. Not need to actually modify the software your using to create proper audit logs, just log everything and figure it out later.

cbsmith 8y ago
> That’s not the goal though. You’re not trying to monitor the systems themselves, you’re trying to monitor the people using the system. From a systems perspective, they aren't logically different. > A financial regulator doesn’t give a crap what your system does, or how it does it. They only care that they can blame (and potentially prosecute) an actual person if it goes wrong. Yeah, you tell that to the regulator when it becomes clear that trades were being published to a competitor a millisecond before they were being listed. > Using middleware boxes makes this easy. Not need to actually modify the software your using to create proper audit logs, just log everything and figure it out later. The log everything part, you are totally right about. The "middleware" box that actually is part of the operational path... that's a different story. You want something that watches the system without actually being part of the system.