4 ms·
Your workstation will never be secure. Ever. It's not possible. Give up and work to implement zero trust. Ephemeral environments like CI/CD are not inherently s
by lijok 3y ago
Your workstation will never be secure. Ever. It's not possible. Give up and work to implement zero trust. Ephemeral environments like CI/CD are not inherently secure because they're ephemeral either.
- yjftsjthsd-h 3y agoIf we assume a workstation compromise, why would we trust the zero trust infrastructure that was set up with that workstation?
- lijok 3y agoYou can't trust it. One of the first real lessons security work teaches you is that nothing can ever be perfectly secure, it's all about achieving a level of security that is appropriate given your threat model, and gives you enough confidence to be able to sleep at night. There's steps you can take that involve incredibly secure procurement processes of air gapped devices, but even that will not prove absolute security.