Ask HN: How Do You Maintain Security When Working Remotely?

Re:Ask HN: How Do You Maintain Security When Working Remotely? by davidbanham on Sunday March 15, 2015 @08:04AM (#9206202)

Full disk encryption, close the lid of the laptop when you wander away from it.

No need for a VPN if your connection to the email, chat and vcs servers are using TLS. If not, why not? It is the year 2015.

[ Parent | on HN ]

Re:Ask HN: How Do You Maintain Security When Working Remotely? by mobiplayer on Sunday March 15, 2015 @10:30AM (#9206612)

Why not?

Because you're leaking DNS traffic.

Why not?

Because you're disclosing where your company assets are reachable from a public connection.

I don't know, but a publicly reachable vcs server that's supposed to contain confidential data makes me shiver.

[ Parent | on HN ]

Re:Ask HN: How Do You Maintain Security When Working Remotely? by MichaelGG on Sunday March 15, 2015 @11:08AM (#9206713)

>I don't know, but a publicly reachable vcs server that's supposed to contain confidential data makes me shiver

Isn't that literally the business model of GitHub (apart from the enterprise edition which seems to have mixed reviews), Visual Studio Online, etc.?

[ Parent | on HN ]

Re:Ask HN: How Do You Maintain Security When Working Remotely? by falcolas on Sunday March 15, 2015 @10:46AM (#9206657)

Not to mention vulnerabilities to the myriad of various SSL attacks out there.

Unless you have a crack team of sysadmins who responds to every CVE against OpenSSL and maintains every webserver perfectly, you run the risk of compromising corporate data if you rely solely on SSL to protect your corporate assets.

[ Parent | on HN ]