Re:BeyondCorp is dead, long live BeyondCorp
by Spivak on Friday February 11, 2022 @06:26PM
(#30308255)
I’m surprised that this isn’t a solved problem already because we already have a currently operating global scale system for application and device trust — DRM! Don’t think about the problem like an IT person, think about it like you’re Netflix.
[ Parent
| on HN ]
Can't tell if joking. If hacking Google was as easy as breaking DRM, civilization would have collapsed already.
Re:BeyondCorp is dead, long live BeyondCorp
by Spivak on Saturday February 12, 2022 @12:03PM
(#30314269)
And device authentication deployed by IT can be broken just as easily. You really believe that the device certs deployed on a laptop are going to fare any better than the Widevine decryption key?
I guess the difference is that DRM is basically a single factor with no defense in depth while BeyondCorp uses at least three factors.
Re:BeyondCorp is dead, long live BeyondCorp
by closeparen on Friday February 11, 2022 @09:47PM
(#30309462)
The part about device-bound credentials, TPMs, secure boot, and remote attestation is DRM. One of the biggest real world deployments of those technologies is the XBox.
Re:BeyondCorp is dead, long live BeyondCorp
by djrogers on Friday February 11, 2022 @07:47PM
(#30308867)
1) DRM doesnt improve appsec, it’s only about content security
2) Netflix runs a single application, whereas organizations maintain and provide hundreds
3) Netflix doesn’t need to do any device assurance or inventory
4) Netflix has essentially one level of access to enforce, vs hundreds of roles across hundreds of applications.
Re:BeyondCorp is dead, long live BeyondCorp
by Spivak on Saturday February 12, 2022 @11:56AM
(#30314210)
1) DRM absolutely improves appsec, one of the main things it does it allows you to ensure that the client software is running your unmodified code and protected from the OS.
2) Okay but a web client will get you 80% the way there.
3) Yes/No. Netflix doesn’t but that’s because Google does it for them for Widevine deployments.
4) Widevine has three, pretty complex, policy levels. No reason there couldn’t be more. Plus device authentication is just a metric used in authorization decisions. Nothing is stopping you from having arbitrarily complex authz.