News for hackers. Stuff that matters.

A comment on Give Me the Green Light Part 1: Hacking Traffic Control Systems. Parent comment

Re:Give Me the Green Light Part 1: Hacking Traffic Control S... by hunter2_ on Tuesday July 23, 2024 @12:40PM (#41048046)
Interesting, but I think the VLAN in your explanation is equivalent to the "network" I'm asking about. The V is mostly immaterial, I think.
[ Parent | on HN ]
Re:Give Me the Green Light Part 1: Hacking Traffic Control S... by oasisbob on Tuesday July 23, 2024 @01:07PM (#41048409)
The VLAN part is important.

"LAN" doesn't imply the same use of VLAN trunking or flat network architecture.

Traffic infra being on a VLAN behind the firewall implies a lot of trust in the traffic infra physical plant. You can harden against layer 2 vulnerabilities, but they're a whole 'nother can of worms and possible failure point.

It also implies the possibility of VLAN trunking being used inappropriately.

All the CCIEs I've learned from and trusted were very suspicious about extending the size and scope of LANs offsite through VLANs.

[ Parent | on HN ]