3 ms·
The problem is, if you asked me how did you bake that cake, and I said: I went to my kitchen and used up my ingredients and my methods, then I would not have an
by depr 3y ago
The problem is, if you asked me how did you bake that cake, and I said: I went to my kitchen and used up my ingredients and my methods, then I would not have answered your question.
>There might be/come a longer form technical write-up with more detail of how those products helped
There won't be, they just used their blog to pressure Okta to improve certain things, which is their right I suppose but it makes for very boring reading.
- TheNewsIsHere 3y agoI get what you’re saying, but Cloudflare isn’t trying to keep their methods a secret. They’ve openly written before about the key takeaway: how phishing-resistant MFA (particularly security keys) have saved them in the past. Everything else is just product documentation that’s online to read.
- depr 3y agoI think in this case they _are_ keeping their methods a secret; they don't say how their detection methods work. The BeyondTrust blog post doesn't mention their methods either. In this case that is probably right because knowing what they do to detect intruders would make it easier to stay invisible.
- TheNewsIsHere 3y agoI think we might be talking about two different layers. I was misinterpreting your statement as “why won’t they share their safeguards”, but it sounds like you meant you would have preferred something more analytical in terms of the underlying compromise and detection methods. So I was thinking “but they did share their safeguards: they’re using the features of their product that can let you do X, Y, or Z.” Which is an entirely orthogonal point. I expect that their proprietary techniques underlying all of these capabilities are mostly derived from their insane eyeballs on Internet traffic and their ability to fingerprint and correlate devices and network traffic at scale. I agree it would be nice to hear more about that.