> highly secured and monitored privileged systems So, ultimately "keys to the ca... | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

		otabdeveloper4 5 months ago \| parent \| context \| favorite \| on: One Token to rule them all – Obtaining Global Admi... > highly secured and monitored privileged systems So, ultimately "keys to the castle" aka a long password?

cyberax 5 months ago [–]

It's a bit more complicated :) There are HSMs and code signing thrown into the mix. They went into total overengineering mode when designing it.

But ultimately, any realistic design will eventually have systems that have to be trusted. It's just a question of isolating them.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact