Interview with CEO of rsync.net: “no firewalls and no routers”

Post by navaati » Thu, Mar 18, 2021, 7:42 PM UTC

rsync wrote: post #53

korethr wrote: post #48

I wonder if they have any sales to large enterprises or similar institutions. In my experience, the larger organizations will have a "security" questionnaire required of their vendors, and the person administering it is a droid, incapable of evaluating whether the questions, originally written in the mid-00s and only updated for buzzword compliance since, are applicable to modern security practice today, or to the pa…

"I wonder if they have any sales to large enterprises or similar institutions." Yes, certainly. We frequently fill out very detailed checklists and questionnaires related to our quality policy, standards, internal policies, etc. We're also very honest about how we approach these issues: https://www.rsync.net/resources/regulatory/pci.html ... and they generally appreciate the honesty.

Post by high_byte » Thu, Mar 18, 2021, 7:45 PM UTC

ev1 wrote: post #97

deadlyllama wrote: post #75

Earlier quoted context omitted.

I used to (late 2000s) work for a tiny, tiny company that was courting a customer in the mobile banking space. They wanted us to tick boxes. So we bought a box (some sort of Fortinet) that said it was a firewall and IDS. Plugged it in, used it as our new router. "Cost of doing business." Could we have argued with them during the sales process? Only if we wanted to lose the sale. The Fortinet was cheap compared to the…

Cost of doing business, or ... introducing new Fortinet vulnerabilities into your infrastructure? I know you mentioned 2000s, but it's funny that these contractually obligated boxes might introduce more worry: https://www.bleepingcomputer.com/news/security/fortinet-fixe...

Post by yellowapple » Thu, Mar 18, 2021, 7:52 PM UTC

Alupis wrote: post #93

ad404b8a372f2b9 wrote: post #83

Earlier quoted context omitted.

I'm afraid the issues I describe have been with Ubuntu. Here's the first line from my "linux sins" file as an example: https://askubuntu.com/questions/1151283/disable-nautilus-cac... If you copy a large file to a USB drive on either Ubuntu or Mint the progress bar goes to 100% instantly and closes and the actual transfer of the file is done in the background without the knowledge of the user. And the answer is "It's…

Fair enough, but I'd just like to point out that specific issue you linked to happens on Windows too (and almost certainly MacOS as well). It's just how device writes work, and is why Windows users have been told for years to select their device -> Eject instead of just yanking the USB drive out when Windows says 100%. So, not exactly a fair criticism in my opinion, but your overall point stands - Linux can be rough…

Post by yellowapple » Thu, Mar 18, 2021, 8:02 PM UTC

frammie wrote: post #21

Really well done interview, some real interesting bits in there. One part concerned me though, in the interview, it mentions "we own (and have built) all of our own platform." and it fails to mention a few critically important key parts of a storage platform, first being encryption. How are personal files being handled? Is encryption being used? Are you able to access this data using a shared key? As well as continge…

Post by iso1631 » Thu, Mar 18, 2021, 8:04 PM UTC

blibble wrote: post #91

iso1631 wrote: post #74

Earlier quoted context omitted.

The only "security risk" i see there is number 1, and that is all to do with physical security. > Disadvantage #1 – Open ports on unmanaged switches are a security risk Why? Is there something that would prevent an attacker with physical access from unplugging an existing cable? Does the average managed switch config have mac limits and auto shutdown if a link is lost for just a few seconds? Mac limits are easilly by…

> Correct they can't. Managed switches without qos set up can't prioritise traffic either. > If your switch is dropping packets, you don't have enough bandwidth. this isn't true, there exist more bottlenecks than just bandwidth, e.g. try sending 10 byte packets instead of 1500 byte packets and watch as your switch starts dropping due to CPU exhaustion > Ultimately it comes down to how big your buffers are whether you…