<html><head><meta http-equiv="Content-Type" content="text/html; charset=us-ascii"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;" class=""><div class=""><span style="font-size: 17px;" class="">One glaring issue I see is that the facility infrastructure seems to be the same or related to the service infrastructure. The tooling required for access control to the facility should not reside on the same network as the service. Perhaps I'm missing something, but it seems to be implied that this one change to the routers impacted more than the service. </span></div><div class=""><span style="font-size: 17px;" class=""><br class=""></span></div><div class=""><span style="font-size: 17px;" class="">I would like to know more details on how Facebook has set up its facility access. Also related is Out of Band management. </span></div><div class=""><span style="font-size: 17px;" class=""><br class=""></span><div class=""><div style="font-size: 17px;"><br class=""><blockquote type="cite" class=""><div class="">On Oct 5, 2021, at 3:56 PM, Ross Tajvar <<a href="mailto:ross@tajvar.io" class="">ross@tajvar.io</a>> wrote:</div><br class="Apple-interchange-newline"><div class=""><div dir="ltr" class=""><div dir="ltr" class="">There are ways to be secure without "running it yourself".</div><div dir="ltr" class="">For example, if the US government can trust AWS, surely so can Facebook? Especially for something like "a backup copy of documentation".</div><br class=""><div class="gmail_quote"><div dir="ltr" class="gmail_attr">On Tue, Oct 5, 2021 at 6:45 PM Tim Dobson <<a href="mailto:lists@tdobson.net" class="">lists@tdobson.net</a>> wrote:<br class=""></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">On 05/10/2021 21:07, Mike Bolitho wrote:<br class="">
> That's definitely possible but what team doesn't have their management <br class="">
> IPs somewhere other than DNS? That seems crazy to me.<br class="">
<br class="">
Like stored in an internal information management system in your own IP <br class="">
space? Whoops.<br class="">
<br class="">
I'd imagine that storing that sort of information outside of facebook <br class="">
could have contravened their own policies on data security.<br class="">
_______________________________________________<br class="">
Outages-discussion mailing list<br class="">
<a href="mailto:Outages-discussion@outages.org" target="_blank" class="">Outages-discussion@outages.org</a><br class="">
<a href="https://puck.nether.net/mailman/listinfo/outages-discussion" rel="noreferrer" target="_blank" class="">https://puck.nether.net/mailman/listinfo/outages-discussion</a><br class="">
</blockquote></div></div>
_______________________________________________<br class="">Outages-discussion mailing list<br class=""><a href="mailto:Outages-discussion@outages.org" class="">Outages-discussion@outages.org</a><br class="">https://puck.nether.net/mailman/listinfo/outages-discussion<br class=""></div></blockquote></div><br class=""></div></div></body></html>