Hacker News new | past | comments | ask | show | jobs | submit login

This person's wiring closet needs to have all Ethernet switch ports in a default 'shut' state and assigned to a quarantine vlan.

It's amateur hour if you can just plug in any random rpi, it gets a DHCP lease, access to the company lan, and a route to the outside internet.




That would be best practice.

However I don't mind being able to get LAN internet at a hotel that wants me to pay $24 per day for wifi when they have VoiP phones that have internet access...


I often bring a small wifi router with me, hook it up to Ethernet (often taking the TV or phone ethernet connection), then set up a local wifi that I can connect a Chromecast to. That in turn sits in the tv, of course.

That gives me internet and streamability/casting to the tv :)


I often find that tethering to T-Mobile LTE is better than whatever misconfigured, screwed up NAT/gateway a hotel has.


Agreed.

Every single hotel I’ve been to in the last year or so has pitiful bandwidth, which is completely saturated after dark once everyone fires up Netflix and lets it run all night long.


Ha! Good to know.


Or, even better, your services need authentication and authorization even on internal network, with some sort of SSO and/or federated authentication, so it actually doesn't matter where you are. Google's own BeyondCorp initiative works kind of this way.

Getting a route to the outside internet is not such a big deal; access to internal data is.

By the way: it's "amateur hour" if, as you say, that happens for a switch in a public/semipublic area in an office structure. On the contrary, I've seen a lot of "all-enabled" switches if those were accessible just from INSIDE the datacenter, where few people had access. It's not a really reasonable scenario.


Yes, the "amateur hour" is giving an ex-employee the key.


They were allowed to keep the key.. I think focus on shutting off ex-employees is exaggerated given that they can plan as disgruntled employees.


It’s amateur hour if being on the company LAN means anything more than being on Starbucks WiFi.


Well, that's the status quo.




Join us for AI Startup School this June 16-17 in San Francisco!

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: