Ask HN: How Do You Maintain Security When Working Remotely?

Re:Ask HN: How Do You Maintain Security When Working Remotely? by lucaspiller on Sunday March 15, 2015 @06:05AM (#9205981)

I don't particularly have any security measures other than a secure password, full disk encryption and locking the screen after a few minutes. If you are taking a device outside of the office (e.g. to take home to work over the weekend) you should be using those anyway.

Pretty much all the services (even internal systems for staff only) I interact with are available publicly and have HTTPS, so using a VPN isn't really going to change much. Most of the company's (big multinational) chats happen over Skype, which is known to be monitored by governments so... :)

We don't deal with sensitive data like financial records or personal data, so there isn't really much to compromise. It's probably easier just to guess someone's password if you want to get access our systems as they are available publicly.

[ Parent | on HN ]

Re:Ask HN: How Do You Maintain Security When Working Remotely? by falcolas on Sunday March 15, 2015 @10:42AM (#9206641)

> using a VPN isn't really going to change much

I disagree, using a VPN on open wifi protects against HTTP downgrade attacks, weak cypher compromise, replay attacks... HTTPS for most sites is just not as secure as it should be. It also masks your traffic so outsiders can't even see what servers you are accessing, or how.

Wrapping the traffic in a VPN and securing access to your internal assets to office and VPN IPs offers another layer of security against even targeted attacks.

[ Parent | on HN ]

Re:Ask HN: How Do You Maintain Security When Working Remotely? by toomuchtodo on Sunday March 15, 2015 @08:30PM (#9208904)

If your company uses any sort of publicly available web applications you support, please for the love of all the bits use HSTS and submit the domain to the HSTS preload list.

[ Parent | on HN ]