I read the federal government’s Zero-Trust Memo so you don’t have to

Re:I read the federal government’s Zero-Trust Memo so you do... by formerly_proven on Thursday January 27, 2022 @12:45PM (#30103584)

It's a different framing to get rid of figleafs. Everything has to be built so that it actually has a chance of being secure - if your state of mind is "this is exposed to the public internet", BS excuses like "this is only exposed to the TotallySecure intranet" don't work any more, because they don't work in the first place. Perimeter security only works in exceedingly narrow circumstances which don't apply - and haven't applied for a long time[1] - to 99.999 % of corporate networks.

[1] Perimeter-oriented security thinking is probably the #1 enabler for ransomware and lateral movement of attackers in general.

[ Parent | on HN ]

Re:I read the federal government’s Zero-Trust Memo so you do... by 3np on Thursday January 27, 2022 @12:52PM (#30103686)

For anyone confused about the term "figleaf", I assume it's a reference to fig leafs being used by Renaissance artists to mask genitalia. So "things concealing the naked truth" approximately.

[ Parent | on HN ]

Re:I read the federal government’s Zero-Trust Memo so you do... by jsmith99 on Thursday January 27, 2022 @01:09PM (#30103892)

It's older than that: it's a biblical reference to Adam and Eve covering themselves.

[ Parent | on HN ]

Re:I read the federal government’s Zero-Trust Memo so you do... by 3np on Thursday January 27, 2022 @01:19PM (#30104063)

My memory serves me wrong; thought that it being a fig leaf in particular was newer than the Bible but it's not (Genesis 1:3:7)

[ Parent | on HN ]

Re:I read the federal government’s Zero-Trust Memo so you do... by lethargic_meat on Friday January 28, 2022 @03:56PM (#30120243)

This sounds like the meme of holding a riffle like a pistol, so your fear for getting smacked with the butt makes you impervious to recoil.

[ Parent | on HN ]