Ask HN: How does your company manage remote working security?

Posted by swadizand on Monday June 08, 2020 @03:06AM
from the ask-hn dept.

Hi all,

I guess most of the people out there working remotely nowadays. But how does your company make sure it's remote working infrastructure is secure enough?

I guess most of the people would answer this as 'plain VPN' but I hope there are more paranoid companies those also care about: physical security, home router configurations, enforced OTP's, secure communication channels, full disk encryption etc.

What is your company's paranoia level - and what they do?

( 11 comments | 17 points | on HN )

Re:Ask HN: How does your company manage remote working secur... by cpach on Monday June 08, 2020 @08:04AM (#23455790)

If you’re interested in the state of the art, have a look at this:

https://www.beyondcorp.com/

https://cloud.google.com/beyondcorp

https://tailscale.com/

https://github.com/slackhq/nebula

[ Parent | on HN ]

Re:Ask HN: How does your company manage remote working secur... by abda0180 on Monday June 08, 2020 @05:47PM (#23461178)

Tailscale is what we have been looking for. It looks like a huge upgrade compared to outsourced boilerplate OpenVPN.

[ Parent | on HN ]

Re:Ask HN: How does your company manage remote working secur... by npiit on Monday June 08, 2020 @08:46PM (#23462440)

Unfortunately it's an unbearably buggy piece of software. Cloudflare has better and even cheaper offerings than this amateurish product.

[ Parent | on HN ]

Re:Ask HN: How does your company manage remote working secur... by abda0180 on Wednesday June 10, 2020 @04:51PM (#23481959)

Thanks for letting me know. I've signed up and tried to get it working as a substitute for our corporate VPN. But i couldn't get it to work.

The landing page is pretty neat, but the user interface is buggy - and not that intuitive.

I'll test out Cloudflare!

[ Parent | on HN ]

Re:Ask HN: How does your company manage remote working secur... by swadizand on Monday June 08, 2020 @08:27AM (#23455896)

Hey, thanks a lot!

[ Parent | on HN ]

Re:Ask HN: How does your company manage remote working secur... by cpach on Monday June 08, 2020 @11:35AM (#23457430)

My pleasure :)

[ Parent | on HN ]

Re:Ask HN: How does your company manage remote working secur... by giantg2 on Monday June 08, 2020 @07:16AM (#23455559)

Full disk encryption, VPN with RSA token, voice and video through the VPN, and monitoring software.

I'm not sure what they could do about the home router config or physical security.

[ Parent | on HN ]

Re:Ask HN: How does your company manage remote working secur... by swadizand on Monday June 08, 2020 @08:30AM (#23455914)

Monitoring software... Is it like those that can power-on webcam as well? Agent, I mean.

[ Parent | on HN ]

Re:Ask HN: How does your company manage remote working secur... by giantg2 on Monday June 08, 2020 @12:23PM (#23457979)

I assume they can. I think they record keystrokes and fo screen captures etc.

[ Parent | on HN ]

Re:Ask HN: How does your company manage remote working secur... by babytwitter on Monday June 08, 2020 @03:23AM (#23454359)

'Plain VPN' unfortunately. But securing vpn credentials nicely wouldn't be enough?

[ Parent | on HN ]

Re:Ask HN: How does your company manage remote working secur... by swadizand on Monday June 08, 2020 @03:44AM (#23454470)

VPN is a nice practice, yeah, but is it your own VPN or from a commercial VPN?

Also I think it's never enough. A bad guy makes you got a virus; logs your key presses and steals the vpn config, and bam, he is inside the company!

The way he must pass to get into company network have to be much more longer and complex.

[ Parent | on HN ]