17 ms·
TFA describes a perfect example of unwarranted implicit trust. Any tunnel-in should terminate in an environment not unlike being outside a regular perimeter, w
by nonrandomstring 2y ago
TFA describes a perfect example of unwarranted implicit trust. Any
tunnel-in should terminate in an environment not unlike being outside
a regular perimeter, with internal per-host access control (perhaps by
RADIUS or some coordinated ACL - which would also have fixed the
parallel account problem )... especially to an unsecured Internet mail
server. I wish the misnomer "Zero Trust" were better crafted and
understood as a broad philosophy. I think it's psychologically
difficult to do the role-play and imagine "what if I couldn't trust
myself?"
- Ekaros 2y agoOnly place I accept implicit trust is inside a single program. Even on same machine one should think is trusting other processes warranted.
- nonrandomstring 2y ago> inside a single program Cool, but hey get this... I'm interviewing next week some guys working in API security. and the discussion notes so far are terrifying. People do all this work to build secure networks and OS, and then someone says "Hmm we need an API for <fashionable reason>", and next thing a junior dev exposes all the top level functions of a program running with high privileges as URL handlers. So maybe even _within_ your app it's not too paranoid to think "what if someone got an entry point into this function?" and at least put a "NEVER EXPOSE" comment there :)