3 ms·
> Tons of exposed s3 buckets and other assets keep showing that. Would firewall rules help alleviate that though? I can only speak for GCS (GCP's s3 equivalent
by pm90 7y ago
> Tons of exposed s3 buckets and other assets keep showing that.
Would firewall rules help alleviate that though? I can only speak for GCS (GCP's s3 equivalent), but firewall rules don't apply to GCS buckets.
Like a sibling commentator said, I would like to know more instances of companies getting breached specifically for adopting a zero trust networking philosophy.
- kerng 7y agoZero Trust is the right strategy, but very few have the resources to implement it. So they in spirit do Zero Trust, but end up without basic security controls nor full fledged micro segmentation and identity. If you work at a startup and experience exponential growth, you know that your internal production network likely has no authentication - this is unfortunately not uncommon and can be dangerous. What old school security controls prevent, are the script kiddie attacks (ooops, that database or Elastic Search cluster exposed on Internet) and random automation attacks - which there are plenty of examples.
- yjftsjthsd-h 7y ago> So they in spirit do Zero Trust, but end up without basic security controls nor full fledged micro segmentation and identity. Then they're not doing zero trust, they're doing minimal access controls, which is rather the opposite and the problem.
- kerng 7y agoThey have the strategic vision to do zero trust with whatever ships out of box, but not more. Like we use GSuites and have MFA, all our problems are solved because we now are BeyondCorp. That's marketing speak.