Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Google Moves Its Corporate Applications to the Internet

blogs.wsj.com

Post reply on HN
Print view View original

131–140 of 155 posts

Re: Google Moves Its Corporate Applications to the Internet

#131

Post by doctorshady »

cs702 wrote: post #38

I'm so happy to see this. As Bruce Schneier (who runs an open WiFi network at home) explains, "if my computer isn't secure on a public network, securing my own network isn't going to reduce my risk very much."[1] The same is true for corporate applications (and devices like printers). If they're not secure on a public network, securing the corporate network won't reduce their risk that much: they're still exposed to…

For what it's worth, Bruce Schneier also has a machine air gapped from the internet. Different scenario from a huge corporate LAN or even a small network with a wireless access point to be sure, but there's a number of ways to interpret that quote.

Re: Google Moves Its Corporate Applications to the Internet

#132

Post by scintill76 »

RyJones wrote: post #127
chias wrote: post #119

Earlier quoted context omitted.

They all have serial numbers, and you had to show ID when buying them. So yes they are registered, you just might not be aware of this fact.

I cut a bunch of them from aluminum, for which I showed no ID, and they do not have serial numbers.

OK, nice. So, my analogy does not apply to all cases, but the point is that many guns are tied to government ID, as are many internet connections. Subverting that is of course possible, and an alternate solution to those problems.

Re: Google Moves Its Corporate Applications to the Internet

#133

Post by bduerst »

dzhiurgis wrote: post #111
bduerst wrote: post #53

Earlier quoted context omitted.

>it's a slap in their face that you don't want to spend your time basking in their physical proximity That's slightly self-centered. Nobody cares about you or their co-workers so much that they are offended if you don't want to work (or bask) in the team's presence. People are tribal by nature, and one of the ways humans feel a sense of belonging is through overcoming common conflict (i.e. Tuckman's stages). While no…

> People are tribal by nature People were tribal before communication tech. That said the company success will depend on how frequently the information can be mixed up. That said, some roles do not need as much communication as others, especially in mature business and niche positions.

Dont be absurd. Humans conform to communities now more than ever.

Re: Google Moves Its Corporate Applications to the Internet

#134

Post by eru »

gmrs wrote: post #85

What if I plug a pendrive in one of these devices and install an app that reads every network activity? If I have the same sequence of packages required to authenticate, I'm in?

> If I have the same sequence of packages required to authenticate, I'm in?

The sequence of packages needed to authenticate is different any time.

Re: Google Moves Its Corporate Applications to the Internet

#136

Post by dzhiurgis »

bduerst wrote: post #133
dzhiurgis wrote: post #111

Earlier quoted context omitted.

> People are tribal by nature People were tribal before communication tech. That said the company success will depend on how frequently the information can be mixed up. That said, some roles do not need as much communication as others, especially in mature business and niche positions.

Dont be absurd. Humans conform to communities now more than ever.

Those communities are formed around ideas, not limited to geography as previously.

Re: Google Moves Its Corporate Applications to the Internet

#137

Post by netheril96 »

serve_yay wrote: post #37

It's nice to see companies moving towards taking security more seriously, but boy oh boy some of it is a real pain in the ass. Every website you log into now needs to text you, or have a companion app or whatever. Every time you lock your screen to get a cup of water or take a leak, you have to log back in, wait for your flaky vpn connection to come back before you can resume what you were doing (maybe not an issue h…

Are you on OS X and have you unchecked the option "Disconnect when switching user accounts"?

Re: Google Moves Its Corporate Applications to the Internet

#138

Post by robbiep »

DrStalker wrote: post #117
RyJones wrote: post #114

Earlier quoted context omitted.

What is a registered gun? I have plenty of guns, none of them are registered.

This varies by country. In Australia if I want a gun I need to have a firearms license, I have to register every weapon I own and store them in an safe that meets certain minimum requirements (separate ammunition, requires key and combination to enter, minimum thickness, rules about how it is secured to the wall/floor, etc) and at any time the police can show up and ask me to show them I have the weapons correctly se…

You also need a valid reason to have a gun- you can be a member of a gun club and be a recreational shooter, or for animal control (my license) but to have that you have to have a property to shoot on

Re: Google Moves Its Corporate Applications to the Internet

#139

Post by rtpg »

passive wrote: post #47
mahyarm wrote: post #36

Earlier quoted context omitted.

Communication and management overhead of remote workers is harder to do right. Like functional programming.

This is absolutely true also, but it is generally easier to address than the need for physical interaction often felt by people in management. (I'm not trying to be derogatory here, as good physical interaction is often closely tied to a manager's success, so it's natural that they would be wary of removing that aspect of their relationships.)

It's not just management, the relationship between coworkers can be harder to develop when you're not (for example) having lunch together.

Re: Google Moves Its Corporate Applications to the Internet

#140

Post by giovannibajo1 »

voltagex_ wrote: post #120
mdwrigh2 wrote: post #29

Earlier quoted context omitted.

Yep, client certs installed on a device with verified boot and an account authenticated via 2FA would be a good start.

Wouldn't that require a browser plugin to login with?

You can have a SSO server that requires a TLS client certificate signed by your own internal CA, or you could put it behind a VPN authenticated with the certificate. Either way, with no custom software, you get device and use authentication.
Post reply on HN