The most striking lesson I think that anyone can take from the recent apache compromise is this:
The more secure zone should have credentials for the less secure one, not the other way round, and the more secure zone should be responsible for controlling the processes that it is involved in.
This way the less secure zone doesn't have any influence over your more secure stuff.
If you, like me, spend your days making systems interact with one another this is reasonably fundamental stuff. But for those who aren't so paranoid its a lesson well worth heeding.
Layers and Gateways, a historical view
-
One of the major issues in building the Internet or any large network is
internetworking. If you have two networks built and run by different
entities, h...
3 days ago
Comments:
blog comments powered by Disqus