@mjg59@nondeterministic.computer
2026-10-31 08:46 UTC
In the Binance version of reality where compromise happened via a developer laptop:
1) Was this laptop running an appropriate EDR? If so, how did it remain compromised and active for so long?
2) If it wasn't, why was it in such a privileged position that it could trigger this outcome?
The point of entry may have been a single developer's laptop, but the fact that a single developer's laptop *could* be the point of entry is a systemic failure, not an individual one
Replies (1)
-
@mjg59@nondeterministic.computer 2026-10-31 08:49
The beyondcorp white paper was over a decade ago and yet we're still in a position where privileged access is permitted without verification that the endpoint is in a secure state first!