Movie streaming firm Netflix has introduced a new open resource device to assist customers make far better possibilities close to machine stability. Dubbed Stethoscope, the device collects facts about consumer equipment to give customers apparent and concise tips on how to secure them. In a weblog put up, Netflix engineers Jesse Kriss and Andrew White claimed that if staff are delivered with targeted, actionable facts and very low-friction resources, “we imagine they can get their equipment into a extra secure point out devoid of large-handed policy enforcement”. “If we provide staff with targeted, actionable facts and very low-friction resources, we imagine they can get their equipment into a extra secure point out devoid of large-handed policy enforcement,” they claimed. “It’s essential to us that people today recognize what simple actions they can just take to strengthen the stability point out of their equipment, due to the fact individual devices–which we don’t control–may extremely very well be the first goal of assault for phishing, malware, and other exploits. If they tumble for a phishing assault on their individual notebook, that may well be the first step in an assault on our units in this article at Netflix.” The device collects facts from both desktop and mobile equipment and from organization administration units this kind of as LANDESK (for Windows), JAMF (for Macs), and Google MDM (for mobile equipment). It also evaluates machine configurations this kind of as disk encryption, firewall standing, monitor saver lock and password, running process patching and car-updating as very well as machine rooting and jailbreaks. It also checks to see whether or not checking program resources are put in. Stethoscope calls for Python for the back again conclude. The Nginx web server and reverse proxy and can be run as a Docker container. It is offered on the Github open resource code repository beneath an Apache two. licence. This write-up initially appeared at scmagazineuk.com
Supply connection Share this:Click to share on Twitter (Opens in new window)Click to share on Facebook (Opens in new window)Click to share on Google+ (Opens in new window)
Related
Movie streaming firm Netflix has introduced a new open resource device to assist customers make far better possibilities close to machine stability.
Dubbed Stethoscope, the device collects facts about consumer equipment to give customers apparent and concise tips on how to secure them.
In a weblog put up, Netflix engineers Jesse Kriss and Andrew White claimed that if staff are delivered with targeted, actionable facts and very low-friction resources, “we imagine they can get their equipment into a extra secure point out devoid of large-handed policy enforcement”.
“If we provide staff with targeted, actionable facts and very low-friction resources, we imagine they can get their equipment into a extra secure point out devoid of large-handed policy enforcement,” they claimed.
“It’s essential to us that people today recognize what simple actions they can just take to strengthen the stability point out of their equipment, due to the fact individual devices–which we don’t control–may extremely very well be the first goal of assault for phishing, malware, and other exploits. If they tumble for a phishing assault on their individual notebook, that may well be the first step in an assault on our units in this article at Netflix.”
The device collects facts from both desktop and mobile equipment and from organization administration units this kind of as LANDESK (for Windows), JAMF (for Macs), and Google MDM (for mobile equipment).
It also evaluates machine configurations this kind of as disk encryption, firewall standing, monitor saver lock and password, running process patching and car-updating as very well as machine rooting and jailbreaks. It also checks to see whether or not checking program resources are put in.
Stethoscope calls for Python for the back again conclude. The Nginx web server and reverse proxy and can be run as a Docker container. It is offered on the Github open resource code repository beneath an Apache two. licence.
This write-up initially appeared at scmagazineuk.com