4 ms·
Realistically, what are you going to do to protect against this case? Your developers/artists are going to use Windows machines, they're going to need access to
by incrudible 5y ago
Realistically, what are you going to do to protect against this case? Your developers/artists are going to use Windows machines, they're going to need access to the source code and access to the internet. Add in a 0-day and that's all the the ingredients to allow for exfiltration of data. Ultimately, there is no protection against this.
Of course you can make your employees' lives worse by siloing them off, enforcing all sorts of security policies and so on. It's just not worth it in this case. So the source code of some video games got leaked... big deal. What are hackers going to do with it, make their own version of Battlefield and FIFA? Write snarky comments on how crappy the code is? Maybe they'll develop cheats, but that can also be done without the source code.
- nradov 5y agoApplication whitelisting can prevent most vulnerabilities from being exploited.
- incrudible 5y agoApplication whitelisting can prevent the execution of unapproved executables, that's about it. Oh, you need to run Python scripts? You're using npm? There go your whitelisting efforts... Whitelisting also won't protect you from exploits in the software itself. If some non-technical user gets compromised and starts sending out malicious PDFs, you better make sure every single installation of Acrobat is up-to-date. If you get hit by a 0-day in Outlook - good luck. Now perhaps in this case people were just sloppy, but again, if you want to rule out exfiltration of data - as opposed to just making it less likely - you need a completely different approach and it'll cost you.