4 ms·
If these machines are denied outside internet access, but still connect to an internal network on which other machines have outside internet access, then that's
by MarkusWandel 3y ago
If these machines are denied outside internet access, but still connect to an internal network on which other machines have outside internet access, then that's a firewall, not an air gap.
- FirmwareBurner 3y agoExactly. The author doesn't know what an airgap actually means.
- yodelshady 3y agoMultiple times I've seen companies be the originator. Quite simply, it's insurance fraud. They demand an air gap, you say you have one. You can certainly argue that, at a general level, air gaps don't work for the same reason teen abstinence doesn't work. They don't happen. But in specifics, particularly for infosec professionals, it should be your job to call out dishonesty. Not to not along sagely and say "air gaps don't always work". If your airgapped machine is breached, there better be a USB lying around, or a physical configuration change. JFC, my Xbox is not airgapped. (actually it currently is. But you get the point.)
- halJordan 3y agoYou know you're in for a treat when you see a thread wanking itself over some industry term. Usually it's some brittle, partial definition being forced onto an entire industry. Idk if you've worked in a modern air gapped networked (jk) but the vast and overwhelming majority of them do in fact have a physical connection to a network capable of reaching the Internet.
- Firmwarrior 3y agoYeah, this discussion is really weird. An actual air gap would be great for security and a huge pita to work on. This half-assed fake airgap seems like a bunch of security theater that's going to make people's day to day jobs a lot more annoying
- deleted 3y ago[deleted]
- konschubert 3y agoThank you pointing this out, I was extremely confused.