News for hackers. Stuff that matters.

A comment on Ask HN: How Do You Maintain Security When Working Remotely?. Parent comment

Re:Ask HN: How Do You Maintain Security When Working Remotely? by mobiplayer on Sunday March 15, 2015 @10:30AM (#9206612)
Why not?

Because you're leaking DNS traffic.

Why not?

Because you're disclosing where your company assets are reachable from a public connection.

I don't know, but a publicly reachable vcs server that's supposed to contain confidential data makes me shiver.

[ Parent | on HN ]
Re:Ask HN: How Do You Maintain Security When Working Remotely? by MichaelGG on Sunday March 15, 2015 @11:08AM (#9206713)
>I don't know, but a publicly reachable vcs server that's supposed to contain confidential data makes me shiver

Isn't that literally the business model of GitHub (apart from the enterprise edition which seems to have mixed reviews), Visual Studio Online, etc.?

[ Parent | on HN ]
Re:Ask HN: How Do You Maintain Security When Working Remotely? by falcolas on Sunday March 15, 2015 @10:46AM (#9206657)
Not to mention vulnerabilities to the myriad of various SSL attacks out there.

Unless you have a crack team of sysadmins who responds to every CVE against OpenSSL and maintains every webserver perfectly, you run the risk of compromising corporate data if you rely solely on SSL to protect your corporate assets.

[ Parent | on HN ]