<?xml version="1.0" encoding="utf-8" standalone="yes"?>
<rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom">
	<channel>
		<title>1lan on Security Architects</title>
		<link>https://securityarchitects.com/tags/1lan/</link>
		<description>Recent content in 1lan on Security Architects</description>
		<generator>Hugo</generator>
		<language>en-us</language>
		
		
		
		
			<lastBuildDate>Wed, 26 Aug 2026 15:00:00 -0700</lastBuildDate>
		
			<atom:link href="https://securityarchitects.com/tags/1lan/index.xml" rel="self" type="application/rss+xml" />
			<item>
				<title>Seven ways a security control can pass while doing nothing</title>
				<link>https://securityarchitects.com/post/controls-that-lie/</link>
				<pubDate>Wed, 26 Aug 2026 15:00:00 -0700</pubDate>
				<guid>https://securityarchitects.com/post/controls-that-lie/</guid>
				<description>&lt;img src=&#34;https://securityarchitects.com/images/logo/1lan.svg&#34; alt=&#34;&#34; class=&#34;product-mark&#34;&gt;&#xA;&lt;p&gt;We spent several days rebuilding &lt;a href=&#34;https://securityarchitects.com/products/1lan/&#34;&gt;1lan&lt;/a&gt;, our reverse-tunnel&#xA;service, so that each machine gets an allocated endpoint instead of one&#xA;derived from its own IP address. The rebuild went fine. What was interesting&#xA;was the bugs.&lt;/p&gt;&#xA;&lt;p&gt;Seven of them, and they turned out to be the same bug wearing different&#xA;clothes: &lt;strong&gt;a check that reports success while the thing it checks is absent.&lt;/strong&gt;&#xA;Not a control that fails loudly. A control that passes, logs nothing, and&#xA;protects nothing.&lt;/p&gt;</description>
			</item>
	</channel>
</rss>
