3 ms·
>I seem unable to get other people to see what I see here. Most people seem to just not get it. I've thought this for a long time. I was even going to cover it
by unimpressive 13y ago
>I seem unable to get other people to see what I see here. Most people seem to just not get it.
I've thought this for a long time. I was even going to cover it in a "computer issues for regular people" book.
EDIT: Cover it in one, not as one, there's a lot more material than that.
- api 13y agoI think a big barrier is the netsec defense in depth / reduce surface area dogma. There's this massive cargo cult of the firewall in security circles, and if you suggest removing a firewall everyone freaks out and calls you an idiot. Of course most malware and other attacks today bypass the firewall using "pull" based vectors like HTTP and e-mail, but try telling people that. Remotely exploitable "pushable" vulnerabilities are rare these days on stock OSes too, but again try telling people that. And by firewall in this context I am referring to middle-box firewalls, not local firewalls. The latter are under the control of a box's user/OS and so can easily be opened to permit lateral communication. Middleboxes are the structural culprit here.