3 ms·
>you had to restore it over the VPN after a safe arrival How do you restore it via VPN? Don't you first need a workable OS to connect to VPN first?
by joe_mamba 7mo ago
>you had to restore it over the VPN after a safe arrival
How do you restore it via VPN? Don't you first need a workable OS to connect to VPN first?
- f1shy 7mo ago“Remove material under NDA” not format blank the computer.
- nine_k 7mo agoYou have a working OS! But you're logged out, all sensitive data is removed (safely overwritten with random data first), and you don't have the means to connect to the VPN or anything corporate (it was before zero-trust architecture), even at gunpoint. You can check your flight status, or look up a cafe nearby to eat, etc. But you have to go to a Google office in the destination city, identity yourself, and get the trusted bits restored on your corp machine. This, together with an OTP device, finally allowed you to reconnect to the internal network (and go check fresh memegen).
- tpetry 7mo agoI do understand why all these steps are required. And they are good. But how should zero-trust architecture solve that? You‘re still authenticated what the core problem is.
- nine_k 7mo agoZero-trust architecture just can work without a VPN, unless the network is blocked. Otherwise everything should be similar.