News for hackers. Stuff that matters.
Re:Defenders think in lists, attackers think in graphs (2015) by lifeisstillgood on Sunday August 25, 2024 @04:50AM (#41345665)
I’m sorry but I really really really want some citations here - a network that has VPNs, LANs at multiple locations is as vulnerable as a single location that uses air-gapped computers passing say usb sticks around to share say git repos.

I am not sure I would enjoy working at the second place but I would really hope we weren’t an easy target

Re:Defenders think in lists, attackers think in graphs (2015) by t-3 on Sunday August 25, 2024 @05:35AM (#41345911)
It's been shown many times that people will pick up random USB devices from anywhere and plug them into any computer without thinking. Airgapping just stops the automated scans and stuff that was already being stopped. Defence is reactive, so the momentum and advantage is always on the attacker side, and stopping the lazy ones doesn't do anything to stop the real threats.
Re:Defenders think in lists, attackers think in graphs (2015) by cutemonster on Sunday August 25, 2024 @08:21AM (#41346793)
People die in car crashes although they have seat belts, it's been shown many times, so seat belts doesn't do anything to stop the real danger.
Re:Defenders think in lists, attackers think in graphs (2015) by t-3 on Sunday August 25, 2024 @09:12AM (#41347054)
The costs of seatbelts are already built in to the car. The cost of airgapping is not. The sheer inconvenience and limiting of the potential employee pool would put it far out of budget for anyone but governments or very large corporations doing very sensitive work, and even in those cases it would be on a site-by-site basis, not org-wide.
Re:Defenders think in lists, attackers think in graphs (2015) by cutemonster on Monday August 26, 2024 @05:54AM (#41355553)
> The cost of ... far out of budget ...

Yes maybe, but now you changed the topic and started talking about money and how expensive things are. Have a nice day anyway

Re:Defenders think in lists, attackers think in graphs (2015) by chalst on Sunday August 25, 2024 @05:13AM (#41345790)
Viruses that infect USB devices can compromise systems based on air gaps.

Cf. eg., https://www.schneier.com/blog/archives/2013/10/air_gaps.html and https://www.schneier.com/blog/archives/2020/05/ramsey_malwar...