S3E5: "Remotely Interested"

Posted 2018-05-07 03:59
Modified 2018-05-06 04:58
Comments 0

In this episode, we talk about considerations for remotely working/telecommuting/digital-only offices/businesses. Jthan’s reference to “meatsnacks”.

• News
• Notes
• Sysbadministration Award
• Errata
• Music

News

• Net Neutrality is “dead“!
  • Except not.
• Mikrotik routers have a fairly serious vulnerability
• VMWare allows guests to escape to the host.
• The RSA Conference app was leaking attendee’s data.
• Intel wearables have come to an end.
• Not just Facebook! Cambridge Analytica is in use with many platforms, and of course 1.2TB was leaked.
• UK law enforcement agencies claim mugshots are “too expensive” to delete.
• Data from a casino was infiltrated via a fishtank thermometer.
  • You can read a report of it from the security firm mentioned here (case #6).
  • I’m unable to find the model of the thermometer.
• There are some weaknesses in Vultr’s domain/DNS management system.

Notes

Starts at 33m39s.

I was drinking Jefferson’s Reserve bourbon still. Paden was drinking Stella Artois. Jthan was drinking water.

• Implementing telecommuting infrastructure
  • Security
    • VPN
      • Selective routing has multiple benefits! Namely…
        • Bandwidth
        • Employee privacy concerns
    • However, staff devices directly connected to infra complicates things – infected machines can propagate to internal resources, so 2FA/MFA is recommended.
  • Staff management
    • Centralized auth is very important; allows for fast turnup/turndown.
    • Ensure access policies to internal resources at the VPN firewall.
    • Have failover and response processes for “staff disappearances”.

Sysbadministration Award

In this segment, we highlight system administration mistakes. Think of them as the IT equivalent of the Darwin Awards. (59m30s)

The IRS website was down on taxday.

Errata

• During the intro, we mention the season 1 shitshow
• The package manager rant episode, Jthan, was indeed NOT the last episode.
• I couldn’t find reference to the incident at RSAC 2017 that Paden mentions.
• A “thermometer that you change”, Jthan, is called a thermostat.
  • Said fishtank device was bluetooth, not wi-fi.
• I’m not finding anything about Cisco dropping IPSec support. If they are, corrections welcome!
• Jthan, there’s no space in asshole.

Music

Author r00t^2
Categories Season Three