3 ms·
You’d be surprised. We had security that rivaled even the standards required by the banks. Truly crazy high multiple physical key paired with vault and some fa
by gigatexal 6y ago
You’d be surprised. We had security that rivaled even the standards required by the banks. Truly crazy high multiple physical key paired with vault and some faraday cage protected offline signing thing — I wasn’t privy to it all just saw bits of it while it was being implemented. Suffice to say it can be done and by going off cloud you get the flexibility to do things like this but... in the end it’s overkill
- postpawl 6y agoFor every 1 of those crazy high security companies, there’s probably 1000’s that couldn’t secure MongoDB instances.
- foolmeonce 6y agoAnd they will host it on Amazon, Google or Azure where their firewall admin won't possibly notice..
- teknopaul 6y agoPerimiter security is not vouge but its better than publicly accessible on the Internet. I would argue if are not comfortable with security take it off the Internet and put it in a dmz. You still need security, but it's a more forgiving environment if you get it wrong between setup and pen test.
- walshemj 6y agoThey could if the spent the $ and recruited experienced people.
- dr-detroit 6y agoEven the high security ones are stuck using trash products that have to be "behind the firewall" to be "secure" because they run statistical analysis on your HR data (why?????) using peopletools with passwords and logins saved in plaintext .ini files