61–70 of 163 posts
The other articles in the series have PDF links, but not the latest one. I'm assuming it will eventually...
[1] https://www.usenix.org/publications/login/summer2017/peck
Dumb question - is the 4th article in the series only available via ;login;[1]? The other articles in the series have PDF links, but not the latest one. I'm assuming it will eventually... [1] https://www.usenix.org/publications/login/summer2017/peck
Great to see them continue this series, and glad that this one touches on what it takes for other companies to achieve something similar. I talk about BeyondCorp a lot as evidence that the Zero Trust model works, and that employees will love it. The most common feedback I get is that it seems like too much of a stretch for companies that don’t operate at Google scale. That may be true if looking at the system as a wh…
If you have interactive session audting.....you will be hearing from me.
Earlier quoted context omitted.
I thought Google doesn't allow remote work?
I think the only restriction is working on Google approved hardware so no BYOD there. (Disclosure: not a Google employee).
To achieve the highest levels of access in the BeyondCorp model you need a machine with Google's management agents, so we can evaluate device state accurately and pull information from our inventory management system.
So google bought the .google TLD!
I work for Duo Security, which this year launched the first major commercial implementation of BeyondCorp as a part of our product offering. Using it to jump on to the wiki, for diff reviews, and other internal resources has been excellent. In addition to simple primary and second factor, you can design policies for MDM-controlled devices only (i.e. designing endpoints that are trusted for remote access), geolocation…
My ex-manager who left Google to another well established company once said the most missed thing from Google was the ability to work remotely right away on corp laptop with BeyondCorp. Disclaimer I work for Google not related to BeyondCorp.
I thought Google doesn't allow remote work?
Yesterday, I saw an article[1] about Amazon's plans to block websites in their stores (a very bad thing) and was wondering when a company like Google was going to launch a VPN service. I wonder if these things will meet in the long term. If companies that control the network try to limit access to information about their competitors, then their competitors might try to liberate that information. [1] http://gizmodo.co…
http://www.androidpolice.com/2016/09/14/wifi-assistant-can-s...
How is this different or more secure than let's say TLS client authentication with the private key on a smart card / Yubikey?
They also take into account the state of the machine you're working on. So locked bootloader and probably a client cert in TPM-like component, plus "device health". Client certs alone are good for authentication (don't work in HTTP/2 though) but they want to reach even better target - no malicious software running on your computer. That's from reading old papers, I don't know if anything changed now.
Is there a link to the actual (fourth) paper? I only see the abstract.