Vulnerabilities exploited in VPN products used worldwide

Re:Vulnerabilities exploited in VPN products used worldwide by labawi on Sunday October 06, 2019 @03:01AM (#21170316)

I wouldn't recommend it with PCs, notebooks, phones, random crapware, but:

When you control¹ all the devices on the network, the network is small enough and the danger from the non-authenticated protocols isn't too high, then I would say it is reasonable to assume being present in the network is sufficient authentication. Not saying it could not be improved, but there are probably many more pressing concerns.

¹ you don't fully control anything anymore, but you're not going to fix that either.

[ Parent | on HN ]

Re:Vulnerabilities exploited in VPN products used worldwide by generatorguy on Sunday October 06, 2019 @01:15PM (#21173337)

The air gapped power plant networks I work on have unused Ethernet ports shut off and the ones in use only accept traffic from the MAC address of the device that is meant to be there. So you can’t just show up and plug in.

[ Parent | on HN ]

Re:Vulnerabilities exploited in VPN products used worldwide by bayindirh on Sunday October 06, 2019 @04:21AM (#21170576)

Thanks a lot. That gave some perspective. I'll keep that in mind.

[ Parent | on HN ]