Conversation

Notices

1. Nate Cull (natecull@mastodon.social)'s status on Monday, 23-May-2022 05:06:55 UTC Nate Cull

   Cloud Provider: Zero Trust. Assume breach. Verify explicitly.

   Me: Okay, I assume you have been breached by the NSA. Please explicitly verify that you haven't been.

   Cloud Provider: Not like that! You're doing it wrong.

   • Santa Claes 🇸🇪🇭🇰🎅 likes this.
   • Nate Cull (natecull@mastodon.social)'s status on Monday, 23-May-2022 05:07:14 UTC Nate Cull

     in reply to

     I mean seriously, what's our countdown clock on years until extremely angry actual fascists succeed in getting 100% control of the Amazon and Microsoft corporate networks, either via the boardroom or via the US Presidency?

     Never?

     And then what, they're just going to sit there and not weaponise the information equivalent of a nuclear weapon? They're going to just go "man we could really get our Dark MAGA pogrom on, but, gentlemen don't read each other's hypervisors"

     We really think that?

     Santa Claes 🇸🇪🇭🇰🎅 likes this.
   • Nate Cull (natecull@mastodon.social)'s status on Monday, 23-May-2022 05:07:15 UTC Nate Cull

     in reply to

     Cloud Provider: Zero Trust. You must implement Least Privileged Access everywhere

     Me: Okay. You get no access.

     Cloud Provider: Not like that! You need to give me ALL the access, so I can know who to give the least access to.

   • Nate Cull (natecull@mastodon.social)'s status on Monday, 23-May-2022 07:11:09 UTC Nate Cull

     in reply to

     • :linux: :fedora_old:🇧🇪 🇪🇺💙💛

     @fedops

     Basically Microsoft/Amazon are the new "Nobody ever got fired for buying IBM".

     They've somehow become Trusted in industry so if you want to do anything else, you have to first make a watertight case.

     If it all explodes and it's Microsoft's fault, well, oh dear but never mind you did the Due Diligence by buying the Market Leader.

     Santa Claes 🇸🇪🇭🇰🎅 likes this.
   • :linux: :fedora_old:🇧🇪 🇪🇺💙💛 (fedops@fosstodon.org)'s status on Monday, 23-May-2022 07:11:10 UTC :linux: :fedora_old:🇧🇪 🇪🇺💙💛

     in reply to

     @natecull people don't actually "think" if you drum "cloudy saves money so you get your bonuses" into their collective heads. Even though it's demonstrably wrong.

     What really runs me the wrong way is that even before your end game scenario, there is no exit strategy. How do you propose to leave m365 or AWS if you need to for some reason?