Security Concerns with Zero Touch Nodes

[SeanP]

I have been working on a node that will allow me to track graph usage via a cloud based SQL database, and it got me thinking; aren’t Zero Touch nodes a huge security risk because they can expose a whole lot more sysyem information and access without any ability to look behind the hood? Who knows what those nodes could be transmitting. Am I wrong?

[Marcel_Rijsmus]

This was raised in this thread too.

Custom packages - virus and malicous code risk?

While trying to get management and other users to buy into learning Dynamo, one topic keeps coming up that keeps frightening them away: What is the risk of downloading malicious code from the dynamo package manager or other locations “that’ll infect our machines/network” or “upload our data to a 3rd party” I know sounds silly, but they do fear that a user would download a innocent looking package that’ll actually upload the model to a ftp site in the background while say … exporting room data …

i suggest you read it, take it in, and move on

[jacob.small]

Thought we were overdue for this debate again… always a fun one.

I would stress this over anything else I stated in there:

@jacob.small

Don’t let the fear of ‘what if’ deny the firm the benefits the rest of us are seeing. Instead take an opportunity to review your company security protocols (I.E. no user should have complete system access) to limit exposure. I reccomend using an external vendor for this who can help you look at things with fresh eyes. You will be safer long term against the very unlikely dynamo attack (or bat file wielding employee) and the absolute certainty of a large distribution attack.