SSH hacks – a little sanity for remote workers

Re:SSH hacks – a little sanity for remote workers by fulafel on Thursday April 30, 2020 @01:17AM (#23027654)

Word of warning: using jump hosts shift your mindset towards building an internal network with lax security, the crunchy outside/soft tasty inside security antipattern.

(Yes you don't intend it at the start, but the realities of your later evaluations of where to invest effort security-wise will leave the internal network to rot since you won't think of the scenarios of how it would be compromised)

[ Parent | on HN ]

Re:SSH hacks – a little sanity for remote workers by Symbiote on Thursday April 30, 2020 @09:21AM (#23030480)

Isn't that typically already the mindset, since most people set up networks with non-routable (10, 192.168 etc) IP addresses?

[ Parent | on HN ]

Re:SSH hacks – a little sanity for remote workers by fulafel on Thursday April 30, 2020 @10:47AM (#23031363)

It's a chicken-and-egg situation, yep. But the world seems to be moving towards zero trust networks, distaste towards complexity and opacity brought on by ambiguous rfc1918 addresses, and wide availability of ipv6.

[ Parent | on HN ]