3 ms·
If I get on your subnet with a host on which I have root, I can do a few things. First, I can now see any unencrypted traffic. Use MySQL? I can read that or eve
by IgorPartola 12y ago
If I get on your subnet with a host on which I have root, I can do a few things. First, I can now see any unencrypted traffic. Use MySQL? I can read that or even MIIT it. Use unencrypted LDAP? I can do the same. Basically you either assume your VPC is secure or it's not.
This goes doubly so for servers on your network. Either, you assume that only authorized users have access to it or you don't. You have to draw the line in the sand somewhere and say "past this point it's secure".
Now, I am not opposed to layers of security, but there are multiple options for how to define those, and assuming your network is secure isn't a far stretch on some platforms.
- FireBeyond 12y agoHmm, how many networks these days are unswitched? How are you going to see traffic that the switch doesn't send to you?
- detaro 12y agoActive attacks, like ARP spoofing? Sure, there are environments where that won't work or will quickly be detected, but in many it will.