3 ms·
> it gets flagged in our security monitoring tool. And when it gets flagged, I have to make that action stop Or... get your security monitoring tool to stop re
by ryandvm 14y ago
> it gets flagged in our security monitoring tool. And when it gets flagged, I have to make that action stop
Or... get your security monitoring tool to stop reporting legitimate P2P protocols as a security threat.
- freehunter 14y ago"Legitimate" p2p protocols depends completely on your risk appetite and how you define your security. For us, our risk appetite is quite low, and there is no such thing as a legitimate p2p protocol.
- aeturnum 14y agoSure, you just write the tool that can audit encrypted traffic from Skype or Spotify in real time and check that it's legitimate as opposed to a malicious program impersonating their protocols.
- dsl 14y ago"Legitimate" depends a lot on the environment. Should Spotify be pushing bits out to the world from your doctors PC? Should it be accepting inbound connections from other random people around the world? Now answer the same two questions after an exploit in the P2P library within Spotify is announced on HN.