3 ms·
Why are foreign subnets even allowed to access JPL systems? Sure it's not going to prevent someone from using a compromised system on a non-banned subnet as a p
by driverdan 15y ago
Why are foreign subnets even allowed to access JPL systems? Sure it's not going to prevent someone from using a compromised system on a non-banned subnet as a proxy but it seems like a simple step that would make it a little harder.
- garg 15y agoThey may be collaborating with the European, Russian, Japanese space agencies. They have researchers traveling the world at any given time. That said they certainly could restrict more access. It's a big challenge because NASA is ultimately a research facility where freedoms of researchers have to be carefully balanced with security and access control. Each department and project has its own needs so it has a very varied attack surface. It's not as simple as simply putting a giant international firewall up. And they do have strict restrictions in place but it takes a single project, or sysadmin to drop the ball causing this sort of embarrassing situation. Clearly it needs to be even more effective.
- johansch 15y agoThat kind of limitation is pretty pointless, since it would not stop a determined attacker.