News for hackers. Stuff that matters.

A comment on Gitlab phished its own work-from-home staff, and 1 in 5 fell for it. Parent comment

Re:Gitlab phished its own work-from-home staff, and 1 in 5 f... by krapht on Saturday May 23, 2020 @02:42PM (#23285329)
Isn't this fairly common? I've now worked at several organizations where sensitive information was stored on air-gapped networks. Software updates or data were moved in and out using pre-approved external drives.

I tend to think this is good software dev practice anyway. You ought to be able to test everything on your testing servers, and if this doesn't adequately reproduce the production environment, it's a problem with your test system.

[ Parent | on HN ]
Re:Gitlab phished its own work-from-home staff, and 1 in 5 f... by JoshTriplett on Saturday May 23, 2020 @03:24PM (#23285632)
> I've now worked at several organizations where sensitive information was stored on air-gapped networks.

Then you won't be processing email on machines on those networks.

[ Parent | on HN ]
Re:Gitlab phished its own work-from-home staff, and 1 in 5 f... by staticassertion on Saturday May 23, 2020 @02:49PM (#23285384)
No that is not common.
[ Parent | on HN ]
Re:Gitlab phished its own work-from-home staff, and 1 in 5 f... by minitoar on Sunday May 24, 2020 @02:10PM (#23293334)
It is common in the sense that it's done frequently enough that we don't need to reinvent it. Most orgs don't want that level of security & inconvenience. FWIW I personally have never encountered it.
[ Parent | on HN ]