BeyondCorp: How Google Ditched VPNs for Remote Employee Access

Re:BeyondCorp: How Google Ditched VPNs for Remote Employee A... by theamk on Monday January 22, 2018 @09:58AM (#16204755)

I don't know more than what's mentioned in public sources, but I can guess:

1) BYOD is likely supported, but provisioning installs the invasive device monitor (as chrome extension [0])

2) Paper mentions that you can at least install your own printers. I would think that SW engineers would have full access, subject to device monitor being happy.

3) Since all keys (both per-user and per-device) are stored centrally, it should be fairly easy to revoke all device keys in this case.

[0] https://static.googleusercontent.com/media/research.google.c...

[ Parent | on HN ]

Re:BeyondCorp: How Google Ditched VPNs for Remote Employee A... by mc32 on Monday January 22, 2018 @11:02AM (#16205362)

>BYOD is likely supported, but provisioning installs the invasive device monitor

Probably not. Since they lock down which apps run or not, I doubt they'd trust some home rolled, untrusted, unverified install with unknown executables running.

[ Parent | on HN ]