Comment

Comment by tcdent

> Yes, that's why all users are root. We built MACs like SELinux just for funsies.

OK gimme an ssh key into your box then.

> L7 DPI firewall policy.

It's a start, but now you're just pushing the fallibility up into extensive policy writing. You have to fully audit and trust every endpoint that's been granted access. And if an endpoint contains a vulnerability which allows RCE, then you haven't secured anything at all.

parent tcdent 29 days ago

Discussion

Live from the official Hacker News API

A modern reader for Hacker News · SvelteKit + Skeleton