Re:Who’s behind Wednesday’s epic Twitter hack?
by judge2020 on Friday July 17, 2020 @12:43AM
(#23867126)
The issue is that, for any company without thousands of employees (heck, probably even some of these are guilty), the VPN is often the only barrier to the entire network. The BeyondCorp model makes you explicitly specify "John can access support.corp.com but not admin.corp.com", while setting up these explicit checks is the exception for VPN-based access, not the norm (and sometimes it isn't even done right - eg. relying on DNS filtering).
[ Parent
| on HN ]
Re:Who’s behind Wednesday’s epic Twitter hack?
by trabant00 on Friday July 17, 2020 @06:45AM
(#23869176)
> The issue is that, for any company without thousands of employees (heck, probably even some of these are guilty), the VPN is often the only barrier to the entire network.
Sorry, but what? I've worked in multiple small companies where the we where less than 5 system administrators and inside the vpn we had encrypted traffic and ldap auth on everything. It's a few days job for a single person to set everything up this way with open source tools that are extremely well known and documented.
Re:Who’s behind Wednesday’s epic Twitter hack?
by totony on Friday July 17, 2020 @05:52PM
(#23876340)
Yeah same, I have even seem 1-sysadmin small businesses have multilayer security
Re:Who’s behind Wednesday’s epic Twitter hack?
by lousken on Saturday July 18, 2020 @07:28AM
(#23880651)
yea, we have the same setup
Re:Who’s behind Wednesday’s epic Twitter hack?
by celticninja on Friday July 17, 2020 @05:21AM
(#23868762)
In short:
VPN can be a security tool, as long as it is not your only security tool.
Re:Who’s behind Wednesday’s epic Twitter hack?
by lowwave on Friday July 17, 2020 @05:58AM
(#23868946)
Think of VPN, just a wifi router. Don't rely on it! Design your internal tools to be secure. Not trust any network or client submitted data.
For these big companies (FAANG, Twitter too), please spend all those money on your security instead of market please.