2 ms·
There seems to be a relative explosion in end-user deployable overlay networks in the last few years. I wonder how many, especially non-tech companies, have en
by tyingq 5y ago
There seems to be a relative explosion in end-user deployable overlay networks in the last few years. I wonder how many, especially non-tech companies, have end users routing the outside world in without company permission.
I know it's not rocket science to watch for each one, or be more sophisticated with deep packet inspection. But, I've worked at some old stodgy companies, and I'm reasonably sure they aren't really watching for it in a lot of places.
- iso1210 5y agoThis has been a threat for 20+ years, certainly everyone I worked with had outgoing ssh tunnels through the socks proxy, with reverse port forwarding, back then. If your network is reliant on a high firewall and nothing inside, you've already lost.
- tyingq 5y agoYes, I'm not saying it is a new threat. Just a broader threat now that there's a lot of ready made solutions that can run in user space. And in some cases, like this one, have very newbie friendly UIs.
- Spooky23 5y agoDepends on the company. Stuff like Crowdstrike and the more advanced Defender service spot this sort of thing. SSH is probably the best one, especially as you can usually get policy exceptions to access cloud resources.