Interview with CEO of rsync.net: “no firewalls and no routers”

Post by recursive » Thu, Mar 18, 2021, 8:52 PM UTC

177tcca wrote: post #113

deadlyllama wrote: post #75

Earlier quoted context omitted.

I used to (late 2000s) work for a tiny, tiny company that was courting a customer in the mobile banking space. They wanted us to tick boxes. So we bought a box (some sort of Fortinet) that said it was a firewall and IDS. Plugged it in, used it as our new router. "Cost of doing business." Could we have argued with them during the sales process? Only if we wanted to lose the sale. The Fortinet was cheap compared to the…

Could you share what firms you're working with now so I can skip doing business with them?

Post by secabeen » Thu, Mar 18, 2021, 8:58 PM UTC

anderiv wrote: post #121

1vuio0pswjnm7 wrote: post #118

Would be interesting to see those shell scripts for sending SMS via Twilio.

I'm not sure what John is using, but they have a very simple example in their documentation. Go here and then click on "twilio-cli" in the right code type selector: https://www.twilio.com/docs/sms/send-messages

Post by xoa » Thu, Mar 18, 2021, 9:07 PM UTC

secabeen wrote: post #124

nicolaslem wrote: post #103

Earlier quoted context omitted.

> The snapshots are immutable (read-only) and cannot be altered in any way. In this way, your rsync.net account protects you from ransomware or malicious parties. Is this still true for these special ZFS enabled accounts?

Not /u/rsync, but I have one of these accounts. The snapshots are immutable (as are all ZFS snapshotss) but you have the ability to run `zfs destroy` on them, so there is a risk there. (When they're doing the snapshots for you, you don't have that ability, but then you just have a filesystem, with no access to the underlying ZFS.) My solution to the `zfs destroy` risk is to make my backups pull-based, where rsync.net…

Post by wbl » Thu, Mar 18, 2021, 9:15 PM UTC

deadlyllama wrote: post #75

korethr wrote: post #48

I wonder if they have any sales to large enterprises or similar institutions. In my experience, the larger organizations will have a "security" questionnaire required of their vendors, and the person administering it is a droid, incapable of evaluating whether the questions, originally written in the mid-00s and only updated for buzzword compliance since, are applicable to modern security practice today, or to the pa…

I used to (late 2000s) work for a tiny, tiny company that was courting a customer in the mobile banking space. They wanted us to tick boxes. So we bought a box (some sort of Fortinet) that said it was a firewall and IDS. Plugged it in, used it as our new router. "Cost of doing business." Could we have argued with them during the sales process? Only if we wanted to lose the sale. The Fortinet was cheap compared to the…

Post by Crontab » Thu, Mar 18, 2021, 9:17 PM UTC