3 ms·
At least not unusual for many companies but there are proponents of a different philosophy [1]. The idea is that drawing a clear line between outside and insid
by weinzierl 6y ago
At least not unusual for many companies but there are proponents of a different philosophy [1].
The idea is that drawing a clear line between outside and inside became futile and you are much better off with an approach that recognizes that fact. Their somewhat provocative slogan is: "The perimeter is dead".
For those working at FAANG: Do you have a corporate VPN? Do you use it? Do you need it for your daily work?
[1] https://www.usenix.org/system/files/login/articles/login_dec14_02_ward.pdf https://www.usenix.org/system/files/login/articles/login_dec...
- Arainach 6y agoAt Google: No. https://cloud.google.com/beyondcorp/ https://cloud.google.com/beyondcorp/ When I was at Microsoft, you still needed a VPN to connect to your dev machine and write code, but more and more internal services were moving to a zero-trust model that didn't require a VPN. Not sure if they've gotten there 100%, but it felt like the clear direction.
- valleyer 6y agoApple uses a VPN. Most stuff needed to get work done (version control, e-mail, bug tracker) is behind it.
- Daho0n 6y agoWell, Apple is not exactly know for being first movers in tech. I'm sure they'll refine the approach in a few years.
- ryandrake 6y agoYea, your threat model needs to include machines that have legitimate access to your corporate network, either by being on it physically or through VPN. If you only have defense at the perimeter, you are vulnerable to insiders, such as employees who are about to rage quit and want to do damage on the way out.