4 ms·
Confused, how is NOBUS supposed to reduce any attack surface? NOBUS means you don't patch vulnerabilities that you believe only you have access to. Wouldn't tha
by mehrdadn 6y ago
Confused, how is NOBUS supposed to reduce any attack surface? NOBUS means you don't patch vulnerabilities that you believe only you have access to. Wouldn't that expand an attack surface (or leave it as-is)? How would a refusal to patch decrease attack surface?
- bayindirh 6y agoYou’re right to be confused. NOBUS assumes that other parties do not have the means to find the same vulnerabilities and/or weaponize them with same effectiveness. It also layers this assumption with “we can prevent it at the firewall level so we can actually patch it while they can’t” idea. As we all know, it’s an absolutely brilliant(!) idea.