News for hackers. Stuff that matters.

A comment on Lastpass Security Incident. Parent comment

Re:Lastpass Security Incident by zelon88 on Thursday December 01, 2022 @10:47AM (#33817820)
It doesn't matter how secure 4 providers are. There are only 4. OpSec won't stop a submarine from bombing underwater fiber. OpSec won't stop a missile heading for the data center. The strategic importance of our consolidated infrastructure WILL be a paramount target for any enemy of the west.

On-prem business is a diversified attack vector. Cloud storage is a consolidated attack vector. Would russia rather attack 100,000 small diverse targets, or one enormous target with 1,000,000s of customers?

[ Parent | on HN ]
Re:Lastpass Security Incident by hn_throwaway_99 on Thursday December 01, 2022 @11:45AM (#33818826)
If your primary concern is global thermonuclear war, then like other commenters have said, I think we'll have much more important things to worry about.
[ Parent | on HN ]
Re:Lastpass Security Incident by MaxBarraclough on Friday December 02, 2022 @03:04PM (#33836090)
If your goal is to avoid downtime in case of nuclear war, you could use a managed distributed database solution from a cloud provider.

Also, attacks against 'on-prem' services still scale, in the sense that an exploit against a service's code can be used on any number of independent deployments of that code. The solution to that is to actively avoid monoculture. [0]

[0] https://indieweb.org/monoculture

[ Parent | on HN ]