Zerotier – multiple vulnerabilities lead to private network access

Re:Zerotier – multiple vulnerabilities lead to private netwo... by tyingq on Monday September 20, 2021 @12:07PM (#28595338)

>Security teams have way more visibility than you seem to be aware of.

I imagine in the real world, this varies greatly. I've worked in many large, non-tech, companies, and saw a lot of false bravado. They watched some things, but not much. Big companies with zero "deep packet inspection", for example, do exist.

>My advice to you and others is to always ask yourself, "Is this really worth losing my job over?", when considering any sort of security control circumvention.

Good advice, but I wasn't wondering for the sake of trying it. I was wondering in the context of this vulnerability.

[ Parent | on HN ]

Re:Zerotier – multiple vulnerabilities lead to private netwo... by tempfs on Monday September 20, 2021 @02:42PM (#28597237)

Don't really need DPI to detect services and protocol patterns, just a decent perimeter device which almost everyone has.

Ex. Tons of UDP streaming from an endpoint to a cloud box sticks out like a sore thumb using little to no special detection magic.

[ Parent | on HN ]