Comment

Comment on CrowdStrike Isn't the Real Problem

ramble81@lemm.ee ⁨1⁩ ⁨month⁩ ago

You’d have to have something even lower level like a OOB KVM on every workstation which would be stupid expensive for the ROI, or something at the UEFI layer that could potentially introduce more security holes.

source

Sort:hotnew top

Leeks@lemmy.world ⁨1⁩ ⁨month⁩ ago
Maybe they should offer a real time patcher for the security vulnerabilities in the OOB KVM, I know a great vulnerability database offered by a company that does this for a lot of systems world wide! /s

source
- A_A@lemmy.world ⁨1⁩ ⁨month⁩ ago
  Lol 😋 ! also i need a “Out-of-Band, Keyboard, Video, and Mouse” to your “OOB, KVM” so to ~~steal the bank~~ improve security.
  
  source
  - Leeks@lemmy.world ⁨1⁩ ⁨month⁩ ago
    “It’s turtles all the way down”.
    
    source
circuscritic@lemmy.ca ⁨1⁩ ⁨month⁩ ago
…you don’t have OOB on every single networked device and terminal? Have you never heard of the buddy system?

source
timewarp@lemmy.world ⁨1⁩ ⁨month⁩ ago
UEFI isn’t going away. Sorry to break the news to you.

source
- ramble81@lemm.ee ⁨1⁩ ⁨month⁩ ago
  I didn’t say it was, nor did I say UEFI was the problem. My point was additional applications or extensions at the UEFI layer increase the attack footprint of a system. Just like vPro, you’re giving hackers a method that can compromise a system below the OS. And add that in to laptops and computers that get plugged in random places before VPNs and other security software is loaded and you have a nice recipe for hidden spyware and such.
  
  source
Brkdncr@lemmy.world ⁨1⁩ ⁨month⁩ ago
Vpro is usually $20 per machine and offers oob kvm.

source