News for hackers. Stuff that matters.
Re:Die, VPN: We're all "telecommuters" now—and IT must... by biot on Thursday October 13, 2011 @04:08PM (#3108569)
VPNs these days are one-click to establish and can be setup to use the same credentials as a work machine's login. You can often have them remember your credentials too so that there's no extra work involved, though this should be limited to situations where employees encrypt their file systems a la FileVault or BitLocker.

I agree that it's becoming less necessary as more and more services use strong, end-to-end encryption. However, using a VPN reduces the attack surface area of a network. SSL guarantees that nobody can eavesdrop on the communication but it doesn't guarantee who you're communicating with. Restricting access to the VPN and internal networks means that any 0-day bugs have little impact on your security as less services need to be public-facing.

The biggest threat with telecommuters is that you leave security up to them and who knows what trojans/rootkits lurk undetected on their machine to your antivirus/antimalware software.

Re:Die, VPN: We're all "telecommuters" now—and IT must... by barista on Thursday October 13, 2011 @04:35PM (#3108651)
> VPNs these days are one-click to establish

DirectAccess is a zero click connection where the company network and resources are available any time you want it. I tried it for a few months and it works like a magic.

For things like security and data protection, you always have bitlocker