4 ms·
LAN segmentation is mostly stupid too. There is a case to make for old protocols and stuff Microsoft just won't fix (it's always Microsoft). But segmenting a w
by marcosdumay 2y ago
LAN segmentation is mostly stupid too.
There is a case to make for old protocols and stuff Microsoft just won't fix (it's always Microsoft). But segmenting a web intranet because you expect the information not to escape is doubly stupid. It not only will escape through an infinity of exploits that exist everywhere; you have exactly 2 groups of people to make access control over, what it certainly insufficient; and finally, you constraint the capacity of people to work physically to inside your office.
- simonw 2y agoJust because it's stupid doesn't mean people haven't been doing it for more than twenty years.
- akira2501 2y ago> But segmenting a web intranet because you expect the information not to escape is doubly stupid. It's one layer in the security stack. It's not sufficient on it's own but there's no reason to get rid of it because it's not 100% effective. > you constraint the capacity of people to work physically to inside your office. Or, you know, just have a VPN.