6 ms·

So, no security patches?

by wosos 11y ago

wumbernang 11y ago
A reasonable question. Only ones that affect the network surface footprint, so none here as it's on a private VLAN.
- beachstartup 11y ago
  that's a pretty terrible practice no matter what OS you're using.
  - hackmiester 11y ago
    Why? I assume that "private VLAN" means it isn't exposed to potential external attack.
    - mburns 11y ago
      Being 'private' only means you don't get hit by drive-by scans from the Internet. There are (depending on configuration) plenty of opportunities for internal attacks, for example the workstation being used to access the boxes. Not to mention removable media (usb, cd-rom) or files copied onto those otherwise isolated hosts could be infected. Patching servers is just good practice. As is designing a system that can handle rebooting individual servers without user-facing downtime.
    - rodgerd 11y ago
      It must be great to know no-one within your environment will ever do anything wrong. Or download anything that will do anything wrong. Or visit any websites than can hijack your browser into doing anything wrong.
      - wumbernang 11y ago
        a) Human error is a possibility but that's not something that can be eliminated. b) They won't download anything wrong. There's no route to the internet for this machine. c) They won't visit any web sites. There's no browser on the machine. This is a core profile windows server installation. Don't assume that we don't know what we're doing. We have 500ish Windows Server machines floating around.
        deleted 11y ago
        [deleted]
        rodgerd 11y ago
        > a) Human error is a possibility but that's not something that can be eliminated. It's good that you've managed to perfect the hiring process to the point you have zero risk of internal fraud or malice.
        wumbernang 11y ago
        Where did I imply or state that? Nowhere! What does that have to do with security updates and reboots? Nothing!
    - deleted 11y ago
      [deleted]
    - beachstartup 11y ago
      http://en.wikipedia.org/wiki/VLAN_hopping http://en.wikipedia.org/wiki/VLAN_hopping
      - hackmiester 11y ago
        I've seen this in older units, but has any recent switch been vulnerable to this?

So, no security patches?

by wosos 11y ago

So, no security patches?

wumbernang 11y ago

A reasonable question. Only ones that affect the network surface footprint, so none here as it's on a private VLAN.

beachstartup 11y ago
that's a pretty terrible practice no matter what OS you're using.
- hackmiester 11y ago
  Why? I assume that "private VLAN" means it isn't exposed to potential external attack.
  - mburns 11y ago
    Being 'private' only means you don't get hit by drive-by scans from the Internet. There are (depending on configuration) plenty of opportunities for internal attacks, for example the workstation being used to access the boxes. Not to mention removable media (usb, cd-rom) or files copied onto those otherwise isolated hosts could be infected. Patching servers is just good practice. As is designing a system that can handle rebooting individual servers without user-facing downtime.
  - rodgerd 11y ago
    It must be great to know no-one within your environment will ever do anything wrong. Or download anything that will do anything wrong. Or visit any websites than can hijack your browser into doing anything wrong.
    - wumbernang 11y ago
      a) Human error is a possibility but that's not something that can be eliminated. b) They won't download anything wrong. There's no route to the internet for this machine. c) They won't visit any web sites. There's no browser on the machine. This is a core profile windows server installation. Don't assume that we don't know what we're doing. We have 500ish Windows Server machines floating around.
      - deleted 11y ago
        [deleted]
      - rodgerd 11y ago
        > a) Human error is a possibility but that's not something that can be eliminated. It's good that you've managed to perfect the hiring process to the point you have zero risk of internal fraud or malice.
        wumbernang 11y ago
        Where did I imply or state that? Nowhere! What does that have to do with security updates and reboots? Nothing!
  - deleted 11y ago
    [deleted]
  - beachstartup 11y ago
    http://en.wikipedia.org/wiki/VLAN_hopping http://en.wikipedia.org/wiki/VLAN_hopping
    - hackmiester 11y ago
      I've seen this in older units, but has any recent switch been vulnerable to this?