Want to read Slashdot from your mobile device? Point it at m.slashdot.org and keep reading!

 



Forgot your password?
typodupeerror
×

Comment Re:Broken either way (Score 1) 101

Emailing is a very limited way of doing collaboration, it spreads more copies of the same data around in multiple different versions. People can't work on the same specific document at the same time, if you edit it and I edit it then we have to manually recombine our changes. How do you then make sure everyone else is looking at the most recent version, email it again? Manual version control? All technically possible to achieve, but not in a way that's particularly efficient.

Ideally you want one version of the truth which has shared access to anyone who needs it, where updates are visible to all other users immediately and it's clear what the latest version of that truth is. Then add in other features like the ability to audit who accessed that document and when, simple backup, one-click DR, ability to revoke access to certain users, if you really want then ability to constraint printing/emailing of documents (within limits).

Comment Re:PR disaster in the making (Score 2) 81

Possibly but many organisations have two options:
1) Use on-premise gear which is often out-of-support, has limited patching/updating due to risk of things breaking and high cost of testing properly, probably not monitored all that well, often not configured particularly securely, managed on a cheapest outsource arrangement.
2) Use a cloud service from a company who only does that one specific thing, their entire business model hinges on them doing it well and securely. Who wrote the software so can monitor and manage it as they completely understand it. Where it's patched and kept up-to-date.

The eggs-in-one-basket approach isn't necessarily the worst option.

Comment Re: I see the advantages (Score 1) 81

Brexit isn't going to change GDPR, it'll come in place before Brexit happens and such regulations will be applied in UK law. The UK was heavily involved in developing GDPR so isn't going to be looking to dodge it. Plus it's the easiest way to be considered "adequate" to keep doing business with the rest of Europe and not need some custom arrangement for data transfers.

Not sure what relevance the OP has anyway, using cloud services doesn't mean you're not compliant with GDPR or any other regulation.

Comment Re:These are the companies that have the gall (Score 1) 32

Modern firewalls are better thought of as a server with dozens of different application proxies and Linux/iptables sat underneath it. They can intercept most protocols and in Palo's case pull files out of the streams and run virus checks or sandbox tests on them, for example SMB connections. That complexity will increase the attack surface, but that can be managed by keeping on top of updates and using layered security so the firewall isn't the only control. The benefits are huge especially in complex organisations where you have a lot of legacy tech to protect.

There are some great OSS ones like pfsense around if all you want to do is basic NAT and block/permit based on TCP port, but firewall tech has moved on a long way from there and that really is a completely different beast.

Comment Re:This isn't even a story (Score 1) 284

Not necessarily, blockchains can use zero knowledge proof to anonymize transactions (aka zk-SNARK)

Most don't at the moment and your statement is accurate for Bitcoin, zCash has it and Ethereum is implementing this soon (possibly just for certain contracts rather than all transactions but I'm not sure on the detail)

Comment Re:Physical access (Score 1) 156

I don't know why you got modded as flamebait because this is spot on. There are other mitigations to reduce the USB risk which are appropriate in most cases as it's not usually feasible to block the ports but some risk remains. Ultimately most environments need USB keyboards & mice so if your badUSB device emulates an HP or IBM keyboard then it's likely to get through any USB device control in place.

There are lots of environments where the biggest threat comes from the people who have physical access.

Comment Re:Completely agree. (Score 2) 225

Doesn't sound like you've got the same kind of card units we have in Europe, here they're integrated handset-sized boxes which do all the card interactions and are either wireless or cabled into the POS. They can usually be picked up for use or are mounted high up, some do have swipe slots but I've no idea why as I've not had a card that could be swiped for over a decade.

Slashdot Top Deals

Old programmers never die, they just hit account block limit.

Working...