5 ms·
Ask HN: How does your company manage remote working security?
Hi all,
I guess most of the people out there working remotely nowadays. But how does your company make sure it's remote working infrastructure is secure enough?
I guess most of the people would answer this as 'plain VPN' but I hope there are more paranoid companies those also care about: physical security, home router configurations, enforced OTP's, secure communication channels, full disk encryption etc.
What is your company's paranoia level - and what they do?
- babytwitter 6y ago'Plain VPN' unfortunately. But securing vpn credentials nicely wouldn't be enough?
- swadizand 6y agoVPN is a nice practice, yeah, but is it your own VPN or from a commercial VPN? Also I think it's never enough. A bad guy makes you got a virus; logs your key presses and steals the vpn config, and bam, he is inside the company! The way he must pass to get into company network have to be much more longer and complex.
- giantg2 6y agoFull disk encryption, VPN with RSA token, voice and video through the VPN, and monitoring software. I'm not sure what they could do about the home router config or physical security.
- cpach 6y agoIf you’re interested in the state of the art, have a look at this: https://www.beyondcorp.com/ https://www.beyondcorp.com/ https://cloud.google.com/beyondcorp https://cloud.google.com/beyondcorp https://tailscale.com/ https://tailscale.com/ https://github.com/slackhq/nebula https://github.com/slackhq/nebula
- swadizand 6y agoHey, thanks a lot!
- cpach 6y agoMy pleasure :)
- abda0180 6y agoTailscale is what we have been looking for. It looks like a huge upgrade compared to outsourced boilerplate OpenVPN.
- npiit 6y agoUnfortunately it's an unbearably buggy piece of software. Cloudflare has better and even cheaper offerings than this amateurish product.
- abda0180 6y agoThanks for letting me know. I've signed up and tried to get it working as a substitute for our corporate VPN. But i couldn't get it to work. The landing page is pretty neat, but the user interface is buggy - and not that intuitive. I'll test out Cloudflare!