alt Hacker NewsMyriad ways, pretty standard on most corporate networks, to restrict access to corporate devices. I cannot access any of my client's resources, including Web apps, without their laptop.
Simple method is IP whitelisting, easy in some ways painful to keep updated. Vpn is another easy option. But then you can have client side certs, hardware tokens, and endpoint security mechanisms which are probably more robust. Either way, it's not a weird unique thing, it's pretty ubiquitous :)
Replies
I think the idea of Flock (and all modern software, pretty much) is not just to offer a service, but to offer it as dirt-cheap and lazily as possible with the intent of creating reasonable margins for a product that otherwise shouldn't even be profitable in the first place.
Doing things, "correctly" is sort of no longer the place of software. The idea is to build solutions that are comprised of toothpicks and sticky tacky so you can force out whatever the alternative was and make money for the shareholders at the same time.
I have to be logged in to azure vpn to access the development environment of the web application I work on because heavens forbid if our users stumble upon a non-production version of the application on the Internet and yet these people just put everything out there for everyone to see. At least I think it should require a CAC card or a PIV card to access sensitive data like this, shutting down immediately if the card presence is not detected somehow.