Personal and social information of 1.2B people discovered in data leak

Re:Personal and social information of 1.2B people discovered... by cobookman on Friday November 22, 2019 @02:59PM (#21609440)

There's something called defense in depth.

Even with ES deployed in an environment with proper network firewall rules...etc, I'd still want some sort of authentication/RBAC

[ Parent | on HN ]

Re:Personal and social information of 1.2B people discovered... by jwandborg on Friday November 22, 2019 @06:39PM (#21611247)

"Defense in depth" sounds, to me, like a phrase to justify multiple layers of imperfect security.

A single layer of cloth might not hold water, adding more layers of cloth may hold water for longer, but it's probably more cost effective to start with the right material.

[ Parent | on HN ]

Re:Personal and social information of 1.2B people discovered... by peteretep on Friday November 22, 2019 @08:47PM (#21611870)

> "Defense in depth" sounds, to me, like a phrase to justify multiple layers of imperfect security.

That’s absolutely correct! But you seem to be missing the fact that _all_ layers of security are always imperfect.

[ Parent | on HN ]