logoalt Hacker News

bad_haircut72last Tuesday at 11:58 PM2 repliesview on HN

did you read the post? The model found new Zero-days to bypass existing blocks. Thats the point. Do you still think you can build a containment facility, which is still physically connected to the internet (only firewalled off or whatever) and contain it, if it can discover new unknown vulnerabilities in your whole plan?


Replies

ofjcihenyesterday at 1:40 AM

Yes.

You factor this in when creating environments for malware research.

Defense in depth is one way.

Logical blocks on the network is another.

Just claiming “0-Day” isn’t really an excuse.

thewebguydyesterday at 4:55 AM

> which is still physically connected to the internet

I mean that's the point. Why was it connected to the internet at all and just firewalled off and not completely airgapped?