Comment on Show HN: Netrinos – A keep it simple Mesh VPN for small teamsparentComments−hugo17898moWhat’s the alternative—locking down all legitimate users and still losing the data anyway?Network controls alone don’t stop exfiltration. HDMI/DP can move data faster than most consumer NICs. Does the system account for that scenario?−wkat42428moIt's a matter of layers. Banning VPNs isn't a perfect measure. But it makes it a lot easier than when you let everyone cowboy around.Same with RBAC. It's not perfect because some people need legit access to stuff and it can be abused. But it makes it much harder for bad actors.−panarky8moNetwork controls alone don’t stop exfiltration.Stop signs alone don't stop all traffic accidents.
Comments
What’s the alternative—locking down all legitimate users and still losing the data anyway?
Network controls alone don’t stop exfiltration. HDMI/DP can move data faster than most consumer NICs. Does the system account for that scenario?
It's a matter of layers. Banning VPNs isn't a perfect measure. But it makes it a lot easier than when you let everyone cowboy around.
Same with RBAC. It's not perfect because some people need legit access to stuff and it can be abused. But it makes it much harder for bad actors.
Stop signs alone don't stop all traffic accidents.