There is a great thread on twitter right now that got me thinking:
https://twitter.com/varcharr/status/1353440987180359680 "What's an infosec skill or concept that you've heard about but don't quite understand?"
I was reading through this and think I have the answers to a few of these questions. I'll try to do a succinct answer to them. This will not be short, but I think I can answer a few of the thread's "unknowns".
My next at least two posts will be answering these questions. The ones I'm picking so far are:
------EDIT: Others answered this first one well enough. I'm not feeling up to whiteboarding this (the part that's missing).--------------------
https://twitter.com/TinkerSec/status/1353451835378593793
"SSH Tunneling.
Hell, I do it all the time. Have my most used commands and flags in my runbooks, readily accessible.
Still don’t fully understand it."
--------------------
https://twitter.com/tony_bridges_el/status/1353468708358926340
"My current bugbear is MS' Shielded VMs. I understand the marketing, but I don't understand on a technical level how they prevent introspection by the hardware/fabric owners.
Part of a larger topic of securing secrets in untrusted environments."
--------------------
I'll add more if I end up answering more. Will be linking to this and the related posts in the thread under my twitter handle: fiasco4297
No comments:
Post a Comment