News for hackers. Stuff that matters.

A comment on Ask HN: How Do You Maintain Security When Working Remotely?. Parent comment

Re:Ask HN: How Do You Maintain Security When Working Remotely? by falcolas on Sunday March 15, 2015 @10:42AM (#9206641)
> using a VPN isn't really going to change much

I disagree, using a VPN on open wifi protects against HTTP downgrade attacks, weak cypher compromise, replay attacks... HTTPS for most sites is just not as secure as it should be. It also masks your traffic so outsiders can't even see what servers you are accessing, or how.

Wrapping the traffic in a VPN and securing access to your internal assets to office and VPN IPs offers another layer of security against even targeted attacks.

[ Parent | on HN ]
Re:Ask HN: How Do You Maintain Security When Working Remotely? by toomuchtodo on Sunday March 15, 2015 @08:30PM (#9208904)
If your company uses any sort of publicly available web applications you support, please for the love of all the bits use HSTS and submit the domain to the HSTS preload list.
[ Parent | on HN ]