News for hackers. Stuff that matters.

A comment on BeyondCorp is dead, long live BeyondCorp. Parent comment

Re:BeyondCorp is dead, long live BeyondCorp by djrogers on Friday February 11, 2022 @07:47PM (#30308867)
1) DRM doesnt improve appsec, it’s only about content security

2) Netflix runs a single application, whereas organizations maintain and provide hundreds

3) Netflix doesn’t need to do any device assurance or inventory

4) Netflix has essentially one level of access to enforce, vs hundreds of roles across hundreds of applications.

[ Parent | on HN ]
Re:BeyondCorp is dead, long live BeyondCorp by Spivak on Saturday February 12, 2022 @11:56AM (#30314210)
1) DRM absolutely improves appsec, one of the main things it does it allows you to ensure that the client software is running your unmodified code and protected from the OS.

2) Okay but a web client will get you 80% the way there.

3) Yes/No. Netflix doesn’t but that’s because Google does it for them for Widevine deployments.

4) Widevine has three, pretty complex, policy levels. No reason there couldn’t be more. Plus device authentication is just a metric used in authorization decisions. Nothing is stopping you from having arbitrarily complex authz.

[ Parent | on HN ]