Ask HN: How does your company manage remote working security? | Hacker News Reader

Ask HN: How does your company manage remote working security?

17 pointsswadizand11 comments

Hi all,

I guess most of the people out there working remotely nowadays. But how does your company make sure it's remote working infrastructure is secure enough?

I guess most of the people would answer this as 'plain VPN' but I hope there are more paranoid companies those also care about: physical security, home router configurations, enforced OTP's, secure communication channels, full disk encryption etc.

What is your company's paranoia level - and what they do?

View on HN

If you’re interested in the state of the art, have a look at this:

https://www.beyondcorp.com/

https://cloud.google.com/beyondcorp

https://tailscale.com/

https://github.com/slackhq/nebula

Tailscale is what we have been looking for. It looks like a huge upgrade compared to outsourced boilerplate OpenVPN.

Unfortunately it's an unbearably buggy piece of software. Cloudflare has better and even cheaper offerings than this amateurish product.

Thanks for letting me know. I've signed up and tried to get it working as a substitute for our corporate VPN. But i couldn't get it to work.

The landing page is pretty neat, but the user interface is buggy - and not that intuitive.

I'll test out Cloudflare!

Hey, thanks a lot!

My pleasure :)

Full disk encryption, VPN with RSA token, voice and video through the VPN, and monitoring software.

I'm not sure what they could do about the home router config or physical security.

Monitoring software... Is it like those that can power-on webcam as well? Agent, I mean.

I assume they can. I think they record keystrokes and fo screen captures etc.

'Plain VPN' unfortunately. But securing vpn credentials nicely wouldn't be enough?

VPN is a nice practice, yeah, but is it your own VPN or from a commercial VPN?

Also I think it's never enough. A bad guy makes you got a virus; logs your key presses and steals the vpn config, and bam, he is inside the company!

The way he must pass to get into company network have to be much more longer and complex.

Reply on news.ycombinator.com