4 ms·

> Those who choose to participate will have their general internet access removed along with root privileges on their individual boxes if they had that Is it j

by nirui 3y ago

> Those who choose to participate will have their general internet access removed along with root privileges on their individual boxes if they had that Is it just a software thing? For example IP blocking via iptables? 0-days in OS kernels are not something super surprising in these days, not really sure a software lock would really help that much. Maybe they should just give their employees two computers, one air-gapped for accessing internal systems and must be kept in the company facility issued the computer, and another one fully online for accessing Stack Overflow and must not store any company information.

politelemon 3y ago
Maybe the StackOverflow bit could be replaced with a local LLM assistant?
- actionfromafar 3y ago
  Or a local copy of SO, there are torrents.
  - umeshunni 3y ago
    It's conceivable that the Google index has a copy of SO
amf12 3y ago
/> Maybe they should just give their employees two computers, one air-gapped for accessing internal systems And why do you think that may not already be the case? Even other big tech companies already give out two computers.
- smueller1234 3y ago
  It is the case at Google and none of them are actually air gapped in the real meaning of "air gapped".
lloeki 3y ago
Looks like so: > Google's tools and office software accessed via the web will still be accessible to those cut off from the internet generally. Workers in the program who require internet access for their jobs will be able to get exceptions. The headline twists the definition of "air gap".
- jeffbee 3y ago
  Eh from their perspective google services are in prod, not on the internet.
  - NegativeK 3y ago
    Unless your production is some really sensitive also air-gapped setup, perspective doesn't change what's going on.
    - jeffbee 3y ago
      I think we’ve already established that the term air-gap has been misused in the article.
nonameiguess 3y ago
It's almost certainly a network-based firewall, not a host-based one. And if you use multiple firewalls from multiple vendors with different OSes running on the firewalls, theoretically, an attacker could have zero days on all of them, but it's statistically much less likely than an attacker having a zero day on only one popular consumer/server OS.

by nirui 3y ago

politelemon 3y ago

Maybe the StackOverflow bit could be replaced with a local LLM assistant?

actionfromafar 3y ago
Or a local copy of SO, there are torrents.
- umeshunni 3y ago
  It's conceivable that the Google index has a copy of SO

amf12 3y ago

/> Maybe they should just give their employees two computers, one air-gapped for accessing internal systems And why do you think that may not already be the case? Even other big tech companies already give out two computers.

smueller1234 3y ago
It is the case at Google and none of them are actually air gapped in the real meaning of "air gapped".

lloeki 3y ago

Looks like so: > Google's tools and office software accessed via the web will still be accessible to those cut off from the internet generally. Workers in the program who require internet access for their jobs will be able to get exceptions. The headline twists the definition of "air gap".

jeffbee 3y ago
Eh from their perspective google services are in prod, not on the internet.
- NegativeK 3y ago
  Unless your production is some really sensitive also air-gapped setup, perspective doesn't change what's going on.
  - jeffbee 3y ago
    I think we’ve already established that the term air-gap has been misused in the article.

nonameiguess 3y ago

It's almost certainly a network-based firewall, not a host-based one. And if you use multiple firewalls from multiple vendors with different OSes running on the firewalls, theoretically, an attacker could have zero days on all of them, but it's statistically much less likely than an attacker having a zero day on only one popular consumer/server OS.