I read the federal government’s Zero-Trust Memo so you don’t have to

Re:I read the federal government’s Zero-Trust Memo so you do... by 0xedd on Thursday January 27, 2022 @07:50PM (#30109316)

Wrong. 80% of attacks are social engineering ones. In which an employee is convinced to make a bank transfer, open some document, install some program. From there, often times it's exploiting wide spread software commonly found in large organizations.

Everything you said cannot be further from the truth.

[ Parent | on HN ]

Re:I read the federal government’s Zero-Trust Memo so you do... by themacguffinman on Thursday January 27, 2022 @08:01PM (#30109423)

Hence the pre-approved software restrictions. In a locked down system, even the most gullible employee won't have the authorization to "install some program".

I'd also hope that businesses care about more than 80% of attacks, preferably they should care about 100% of attacks. Hence, pre-approved software restrictions.

[ Parent | on HN ]

Re:I read the federal government’s Zero-Trust Memo so you do... by ensan on Thursday January 27, 2022 @09:56PM (#30110215)

Wrong again.

The computers in any sizable business already have the pre-approved restrictions set on the OS level. Employers can’t just install any software.

[ Parent | on HN ]

Re:I read the federal government’s Zero-Trust Memo so you do... by xxpor on Thursday January 27, 2022 @11:58PM (#30110843)

That's not true at any big dev shop

[ Parent | on HN ]