They’re specifically talking about Zero Trust though and treating it like a corporate device as the joke. This means authenticate at every layer, RBAC, and endpoint security compliance before allowing access to a service. Putting the device into an isolated guest VLAN works too of course.

[–] curbstickle@anarchist.nexus 5 points 17 hours ago

Thats all I do.

Separate SSID, goes right into its own little hellscape with no access to anything but the internet.

And a small 8 port switch for a hardwired guest option. But thats not lit until its needed.

[–] Scoopta@programming.dev 5 points 17 hours ago (1 children)

Yeah, he did that...and then kept going for some reason. A separate subnet in a separate firewall zone that doesn't forward anywhere but the internet should be sufficiently safe

[–] ExLisper@lemmy.curiana.net 8 points 17 hours ago (1 children)

Not for the kid.

[–] Scoopta@programming.dev 4 points 15 hours ago (2 children)

Was he worried about the kid or his network lol?

[–] felbane@lemmy.world 4 points 15 hours ago

por_que_no_los_dos.meme

[–] arin@lemmy.world 1 points 15 hours ago

Neither