3 ms·
What does Google do in this regard? I don't work there, so I'm curious to hear about their solution for endpoint security. From what I've heard, they don't all
by snazz 6y ago
What does Google do in this regard? I don't work there, so I'm curious to hear about their solution for endpoint security.
From what I've heard, they don't allow sensitive data on laptops in the first place—you mostly SSH into your desktop or a cloud machine. That's probably not enough to solve the issues you described, so I wonder what else they do.
- walrus01 6y agoI would be shocked if they don't have a whole team of people keeping up on the threat models for client workstation windows, macos and linux endpoint devices, and creating the equivalent of windows active directory registry pushes+other software loads to guarantee the condition of an endpoint device. Otherwise how do you know an endpoint device (assuming it's on a network segment with a default route out to the internet, or is somebody in a work-from-home mode) isn't running a persistent video recording session feeding something like a realtime mirror of the screen, VNC-over-SSH tunnel to some third party. At smaller size companies I have even seen stories of a person who was hired as a fully remote developer by $software_corp, and proceeded to set up a remote desktop tool and subcontract their entire job to a person in $developing_country, at a significant profit margin.
- csande17 6y agoI wonder if there are any big companies that require HDCP and some sort of "trustworthy USB devices only" system.
- marcan_42 6y agoDRM is not security. Nevermind the fact that HDCP has been broken for ages and any random Chinese capture card will ignore it and Chinese HDMI splitter will strip it, if the purpose is to cheat the system then you can just point a camera at a screen (perfect video quality isn't a requirement here).
- closeparen 6y agoThere are companies where your (airgapped) workstation stays in the office and your phone / any other personal electronics stay outside the office.
- zerkten 6y agoMicrosoft documented some of what they do at https://www.microsoft.com/en-us/itshowcase/protecting-high-risk-environments-with-secure-admin-workstations https://www.microsoft.com/en-us/itshowcase/protecting-high-r....
- jcims 6y agoNote this is for operations/privileged access in high risk environments vs. standard issue desktops. Saw a little bit of this up close a few years ago, seemed quite solid and well thought out.