NIST Provides Comprehensive Resources for Secure Teleworking

[Zenaan Harkness]

On Fri, Mar 20, 2020 at 11:31:55AM -0400, grarpamp wrote:
> On 3/20/20, John Young <jya at pipeline.com> wrote:
> > NIST Provides Comprehensive Resources for Secure Teleworking
> >
> > https://csrc.nist.gov/publications/detail/itl-bulletin/2020/03/security-for-enterprise-telework-remote-access-and-byod/final
> >
> > https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-46r2.pdf
> 
> Don't forget... every supposed "end-to-end secure crypto" thingy that
> pushes pulls terminates stores into from or on an endpoint you don't
> control... is not secure, and often plundered in various manners by


s/often//

TFTFY


> those with your best disinterests in mind. This generally includes all
> closed source commercial software. Wannabee Crypto AG's, NSA's,
> and backdoor corporate datapimps everywhere.
> 
> 
> "
> > What are the best-in-class video conferencing options for low-bandwidth situations?
> 
> Lines flapping or dropping packets is classic
> problem for streaming / interactive comms,
> downgrade is to use file xfer tools.
> 
> Beware commercial services regarding cryptoprivacy.
> There are lot of tools for creating crypto private lans,
> anon nets, over IP to add that layer to standalone
> opensource apps where needed.
> 
> If just low bandwidth, try testing point-to-point on lowest
> rate/quality codec option settings first, don't need 4K HDR
> just to talk and hold newspaper pages in front of camera.
> If at least one peer can handle being a hub, or threat model
> allows to rent some cheap shell host, then conference options
> open up.
> 
> https://en.wikipedia.org/wiki/Comparison_of_instant_messaging_protocols
> https://en.wikipedia.org/wiki/Comparison_of_cross-platform_instant_messaging_clients
> https://en.wikipedia.org/wiki/Comparison_of_VoIP_software
> 
> Tox, Jami, Matrix, Signal, Jitsi, Wire
> FreeSWITCH, Jingle Protocol
> 
> Some people play with those, there are many tools,
> see what fits, have fun.
> "
> 
> https://github.com/Loki-project
> 
> More out there you can find...