News for hackers. Stuff that matters.

A comment on Implementing a Zero Trust Architecture. Parent comment

Re:Implementing a Zero Trust Architecture by pvg on Tuesday August 09, 2022 @05:20PM (#32404477)
Avoid unrelated controversies, generic tangents, and internet tropes.

https://news.ycombinator.com/newsguidelines.html

[ Parent | on HN ]
Re:Implementing a Zero Trust Architecture by israrkhan on Tuesday August 09, 2022 @07:09PM (#32405809)
I dont blame the parent for paranoia. NIST has been involved in standardizing protocol/algorithms with backdoors. It is not a controversary, it is documented. Although they pulled off the standard when it became public news [1].

[1] https://www.securityweek.com/nist-pulls-dualecdrbg-algorithm...

[ Parent | on HN ]
Re:Implementing a Zero Trust Architecture by pvg on Tuesday August 09, 2022 @08:47PM (#32406619)
It's not whether it's a controversy, it's that it's a generic, tropey and unsubstantive comment. 'X sux' is a bad comment even if X really sux.
[ Parent | on HN ]
Re:Implementing a Zero Trust Architecture by t-3 on Wednesday August 10, 2022 @02:13AM (#32408326)
"You're breaking the rules" is just as generic, tropey, and unsubstantive as any other low-effort comment, and continuing arguments to defend your derision is far more disruptive to the tone and flow of discussion. If you had just quietly downvoted, there would be little/no comment thread down here.

P.S. Yes, I understand that I'm doing exactly the same thing, but I felt this should be said.

[ Parent | on HN ]
Re:Implementing a Zero Trust Architecture by pvg on Wednesday August 10, 2022 @02:45AM (#32408497)
I'm doing exactly the same thing

No, have at it, at the very bottom of the thread, hanging off a flagkilled comment is exactly where all this belongs and that is where we are, a safe little basement of meta. That's also what makes the irritating rule-complaints qualitatively different from gratuitously crap toplevel comments. Neither are good but one is way more not good than the other.

just quietly

To embrace an internet trope, Sir, this is a messageboard.

[ Parent | on HN ]
Re:Implementing a Zero Trust Architecture by denton-scratch on Tuesday August 09, 2022 @05:46PM (#32404778)
Well, parent has actually expressed my reaction. The article seems to be a puff site, with no details about what they mean by "Zero Trust". I didn't follow any of the links (I don't think I should have to).

If NIST has something to tell me, then they need to tell it me straight, not cloaked in partner sites and snazzy graphics.

[ Parent | on HN ]
Re:Implementing a Zero Trust Architecture by pvg on Tuesday August 09, 2022 @05:52PM (#32404838)
You can write a comment about things you don't like in the thing posted but not a reflexive trope response that can appear unchanged in anything with 'NIST' in it, which is what the guideline is about.
[ Parent | on HN ]
Re:Implementing a Zero Trust Architecture by denton-scratch on Wednesday August 10, 2022 @12:48PM (#32414975)
Agreed, GP violated the guideline.
[ Parent | on HN ]
Re:Implementing a Zero Trust Architecture by tptacek on Tuesday August 09, 2022 @06:26PM (#32405330)
You're a Google search away from the entire industry explaining to you what they think "Zero Trust" is --- the term predates the OMB memo.

Your best first read is the Google BeyondCorp paper.

[ Parent | on HN ]