3 ms·
"A firewall that only allows connections from one Internet-connected server" is quite literally not an air gap. It's one of those things that you look back on a
by jaywalk 5y ago
"A firewall that only allows connections from one Internet-connected server" is quite literally not an air gap. It's one of those things that you look back on and wonder how in the world that decision was made.
- sterlind 5y agoseems totally unjustifiable to me. if they truly needed to keep backups of their customers' seeds, then send them through a data diode to an actually-airgapped tape deck. there's no reason to keep seeds on the machines where they were generated. ...also, since they detected the breach before the attackers got to the "seed warehouse," why did they try to tail them in real time? just pull power to the whole DC.
- jaywalk 5y agoThe only thing I can think of with the "tailing in real time" is that there was some journalistic license taken to spice up the story. Otherwise, you don't even need to pull power to the whole DC. Just cut off all Internet access.