kerng

62 ms·

691.
by kerng 7y ago
BeyondCorp != Zero Trust Zero Trust includes heavily leverageing attack surface limitation to prevent lateral movement. This means even if an attacker has stolen passwords, cookies or whatever single factor token that is needed to move late
692.
by kerng 7y ago
They prevent or limit lateral movement once the malware is running.
693.
by kerng 7y ago
Internet exposed bastion hosts to production, that have no IP whitelisting are not the best idea, unfortunately not uncommon nowadays.
694.
by kerng 7y ago
Zero Trust is the right strategy, but very few have the resources to implement it. So they in spirit do Zero Trust, but end up without basic security controls nor full fledged micro segmentation and identity. If you work at a startup and ex
695.
by kerng 7y ago
The entire "BeyondCorp" strategy from Google has probably done more harm then good. Tons of smaller companies and well known startup paid their prices with breaches left and right. Removing or not deploying basic firewall controls
696.
by kerng 7y ago
It's interesting that the encouragement for self isolation in Washington came from companies like Microsoft about 10 days ago. That raised awareness quite a bit.
697.
by kerng 7y ago
Not if they would have made it open source 2001 - or anytime later for that matter.
698.
by kerng 7y ago
Still hoping Microsoft will open source VB 6. It indeed was a language for the masses back then. There would have been no need for Python syntax or Golang with Visual Basic's simplicity
699.
by kerng 7y ago
Security is multi layered, relying only on a single leads to bad things.
700.
by kerng 7y ago
That always works like a charm!
701.
by kerng 7y ago
Without a timeframe this data is meaningless. 1 month, 6 months, 1 year, 5 years, 10 years?? The media is not very helpful here. I assume its meant seasonal, 2020 - but that's just a guess.
702.
Coronavirus: Chinese app WeChat censored virus content since 1 Jan(bbc.com)
1 points by kerng 7y ago|0 comments
703.
by kerng 7y ago
Reminds me of the book Showstopper and the personal stories in - its about the creation of Windows NT. Pretty interesting how things where not so differnet some 30 years ago In case anyone is interested: https://www.amazon.com&#x
704.
by kerng 7y ago
Yeah, agreed. Makes me also wonder how secure my information is with them. Definitely not ideal.
705.
Documents suggest Huawei broke sanctions on Iran by shipping it US equipment(businessinsider.com)
2 points by kerng 7y ago|0 comments
706.
Tiny electric car looks like a washing machine and costs just $6,600(cnn.com)
107 points by kerng 7y ago|124 comments
707.
by kerng 7y ago
>>Databases are a very bad communications medium Are they? That's how majority (all?) systems that are asynchronous work. The data to be communicated has to be persisted. I think asynchronous is a good communication method.
708.
Zero Trust and Disabling Remote Management Endpoints(wunderwuzzi23.github.io)
2 points by kerng 7y ago|1 comments
709.
by kerng 7y ago
>> Google will be in the "cloud" business until the heat death of the universe Maybe consumer space, in enterprise I would not bet on it.
710.
by kerng 7y ago
Agreed, and the majority of the positive press and Azure being seen as being a more then viable alternative has already been done. AWS won't be able to revert that change in public perception that Azure has grown up. That's also t
711.
by kerng 7y ago
I find it interesting that Jimmy is even engaging in the discussion, because the other party clearly does not understand Blockchain or Cryptocurrency.
712.
by kerng 7y ago
These days its .local - we should keep an eye on that
713.
by kerng 7y ago
If you do it by accident, you pay a fine. If you do it knowingly someone should go to jail. It's time to hold those tech companies to a higher standard.
714.
by kerng 7y ago
Well, at least they will have to make sure they performed due diligence with testing- because a test would reveal this pretty quickly. You know real testing, not using customers as Guinea pigs
715.
by kerng 7y ago
This is big, and has GDPR fine written all over it. And I'm sure this will not be the last time we hear about this. Also, very curious to learn more of the technical details down the road?
716.
by kerng 7y ago
Maybe its lost in translation, but I doubt you can patent a name. Maybe copyright, or trademark?
717.
Germany has proof that Huawei worked with Chinese intelligence: Handelsblatt(uk.reuters.com)
15 points by kerng 7y ago|0 comments
718.
Google paid researchers over $21M for bug bounties, $6.5M 2019(venturebeat.com)
2 points by kerng 7y ago|0 comments
719.
Amazon employees conduct defiance of company communications policy(houstonchronicle.com)
2 points by kerng 7y ago|0 comments
720.
by kerng 7y ago
Amazon's reaction seems quite defensive, and constantly keeps reminding us how Microsoft is seen as the better overall provider to be trusted in this case. Tech wise they are both capable, no doubt. I think Amazon should have just ackn

More ›