Viewing profile — maxsaltonstall

How Google and academic researchers track, measure and share data on internet shutdowns around the world.

Hi, I'm Max, one of the two people who gave the talk this post references. I work in Google Cloud and help publish papers about how we have done BeyondCorp. Ask me questions!

Each time an employee tries to connect to an application, the access proxy makes an evaluation of how much trust that session can earn, and if it's equal to or greater than the tru…

Hi, I'm Max. I gave the talk that this article mentions, and have helped publish papers about BeyondCorp over the last few years. At Google I work in the Cloud CTO Office. I'm eage…

Blog post now links to downloadable PDF

Link the blog post now points to a downloadable PDF thanks to Google Drive.

Exactly. And because you can't be sure that the intervening network is safe, you need to encrypt all the traffic, even after checking authorization and authentication. That's the B…

You're right, the initial version of Identity-Aware Proxy (IAP) is for Cloud applications, but that's not the end of the story, and we're learning from BeyondCorp's 7 year journey …

Working on that now, I think I messed up on my end with our internal tool, hope to have the full PDF download from research.google.com in a day or two, maybe next week if I epic fa…

That's correct. Previous papers touch on the inventory data pipeline and machine health, though without as much detail as I might like in your shoes. Our agents track a wide variet…

Bring Your Own Device is fine for ChromeOS and Mobile. You might not get the full amount of trust as a Google-issued device (for mobile/tablet). To achieve the highest levels of ac…

I think that was my mistake, the PDF is in the pipeline, expect it live within a week.