• jj4211@lemmy.world
    link
    fedilink
    arrow-up
    0
    ·
    6 days ago

    I feel like when ‘Zero Trust’ first became a thing, the theme was ‘you should have every endpoint under your control hardened so it need not feer untrusted peers being able to connect’. E.g. if you think you absolutely need VPN to a ‘private network’ for security, then you are failing to be hardened in a ‘zero trust’ way, because you implicitly fear that your systems would fall to untrusted peers.

    I feel like it’s evolved to ‘don’t let anything be able to connect to anything under your control unless you have admin privilege over it as well’. Which is particularly a nightmare when you try to collaborate between two companies, each balking at the other’s hard requirement to have admin access to all network peers of interest.

  • Bosht@lemmy.world
    link
    fedilink
    English
    arrow-up
    0
    ·
    6 days ago

    I legitimately can’t tell if this is a joke or some dude trying to do a humble brag post on LinkedIn. So many ‘look what I can do’ posts on that damn site.

    • FunkFactory@lemmy.world
      link
      fedilink
      English
      arrow-up
      0
      ·
      6 days ago

      No one that serious about network security wouldn’t already have a network dedicated to untrusted devices relatives could use. Definite joke, still entertaining 😂

  • Redredme@lemmy.world
    link
    fedilink
    arrow-up
    0
    ·
    6 days ago

    Guest vlan? Smart.

    Blocking 80/443 knowing all to well everything depends on those: evil.

    Throttling to 56k: the original original poster just being a dick.

    Took 45 minutes: Maybe find another job. You’re not good at it.

    Conclusion: The sister was right. Evil incompetent dick.

    • andioop@programming.dev
      link
      fedilink
      English
      arrow-up
      0
      ·
      6 days ago

      I have a feeling this is satire, and I’m usually the type of person to miss the joke and think it’s genuine

      • Honytawk@feddit.nl
        link
        fedilink
        arrow-up
        0
        ·
        5 days ago

        Even if it is satire, doesn’t mean we can do a full breakdown, especially for comedic value.

    • tetris11@feddit.uk
      link
      fedilink
      English
      arrow-up
      0
      ·
      edit-2
      6 days ago

      Took 45 minutes: Maybe find another job. You’re not good at it.

      Bit harsh.

      The OpenWRT guest wifi guide isn’t a simple switch like you would get on your OEM router, but involves manually setting up a bridge device, a new firewall zone, and a new AP on one of your radios.

      This can take some time if you want to do things the right way. 10 minutes to setup with no extra config steps. Add another 10 if you need to move around your firewall rules, and another 20 for random debugging.

      https://openwrt.org/docs/guide-user/network/wifi/guestwifi/configuration_webinterface

      Although, you set it up once. After that it’s just a checkbox.

      • nibbler@discuss.tchncs.de
        link
        fedilink
        English
        arrow-up
        0
        ·
        6 days ago

        and of course you need to tag the new network on all your switches, routers, APs… not to forget testing and integration in your monitoring system. 45 minutes is absolutely fine.

  • blinfabian@feddit.nl
    link
    fedilink
    English
    arrow-up
    0
    ·
    6 days ago

    what a dick move tbh. i get ya wanna be secure, but why not just let him do his thing on that alternate network?

    • nibbler@discuss.tchncs.de
      link
      fedilink
      English
      arrow-up
      0
      ·
      6 days ago

      guess this is satire. zero trust and byod mix well, just isolate from your shit and you are done. block port 25 outgoing and known c2 IPs to not taint your IP.

    • luciferofastora@feddit.org
      link
      fedilink
      arrow-up
      0
      ·
      6 days ago

      As a former kid struggling with social skills, I think that would’ve done me some good. It’s easy and convenient to fall into avoidance behaviour, but overcoddling did me no favours.

      • Lor@sopuli.xyz
        link
        fedilink
        English
        arrow-up
        0
        ·
        5 days ago

        Same, my parents pushed me into socializing, which i HATED at the time. I know it helped.

      • Notyou@sopuli.xyz
        link
        fedilink
        arrow-up
        0
        ·
        6 days ago

        I was told overcoddling reduces resiliency. Parents always coming in to fix things without letting their kids try to solve it on their own. The kid may fail but the act of trying and figuring out why it failed helps greatly. Most parents just “don’t want to see their kids upset” though.

        Take it with a grain of salt, as I don’t have any kids.

        • luciferofastora@feddit.org
          link
          fedilink
          arrow-up
          0
          ·
          5 days ago

          The balance to be struck is the golden zone between overcoddling and undersupporting. Kids need help getting “close enough” to figure out the rest on their own, gradually less so as their abilities expand.

          In some ways, I was coddled and never learned how to do stuff. In others, I was neglected and had no idea where to begin to solve things, so I just didn’t. Neither is great.

          as I don’t have any kids.

          You don’t need to have kids to engage with the topic of how best to deal with them. It’s a valuable skill to have when dealing with children, whether your own or someone else’s. In fact, some parents probably should have engaged with the topic more before they squeezed one out. That shit is complicated and I wouldn’t want to just figure it out on the fly.