Comment on Ten mistakes marred firewall upgrade at Australian telco

• sola@aussie.zone ⁨4⁩ ⁨days⁩ ago

  I know exactly want I am talking about. What happened to Optus happens to me all the time when developing custom software for Australian businesses. Sys-admin is all outsourced to a huge Indian conglomerates who have no clear idea about the scope of the network and no incentive to know it. Consistently claim a ticket is completed when it has not been and repeat 5-6 times before they blame the software, repeat until I have a full Phd thesis of evidence demonstrating it is a sys-admin issue.

  In the end it is all security theater because I write the software and could screw up the whole business if I wanted to be malicious.

  source

  • dgriffith@aussie.zone ⁨4⁩ ⁨days⁩ ago

    because I write the software and could screw up the whole business if I wanted to be malicious.

    Which is why there is the general rule of zero trust in networks. You start with nothing and you need to prove why you need a hole poked in the firewall. Some IT departments are better at actioning those requests than others. You clearly have had the joy of working with IT departments that are on the worse end of the scale.

    source

    • sola@aussie.zone ⁨4⁩ ⁨days⁩ ago

      Which is why there is the general rule of zero trust in networks.

      Exactly. Hence I started with the trillion dollar mistake comment, it costs a truck load of money to get any changes for development with no security benefit in this context. I could feed businesses bad data and no network dictatorship can stop that.

      source

      • notgold@aussie.zone ⁨4⁩ ⁨days⁩ ago

        Image

        source