From b7bd974b484059b296a30a85533b94a66a378e92 Mon Sep 17 00:00:00 2001
From: fria <138676274+friadev@users.noreply.github.com>
Date: Thu, 23 Oct 2025 08:00:51 -0500
Subject: [PATCH] add attacker diagram

---
 blog/posts/zero-trust.md | 20 ++++++++++++++++++++
 1 file changed, 20 insertions(+)

diff --git a/blog/posts/zero-trust.md b/blog/posts/zero-trust.md
index 7f7dddd5..8e75d9dc 100644
--- a/blog/posts/zero-trust.md
+++ b/blog/posts/zero-trust.md
@@ -37,4 +37,24 @@ Anyone outside the network is considered "untrusted" and are not given access to
         D --> B;
         B --> E[Printer];
         E --> B;
+```
+
+This doesn't just include people physically inside the network, this also includes people connecting to the network over a VPN. Once the VPN spits you out, it's like you're physically there on the network, along with all the privileges that entails.
+
+## Issues
+
+You might notice this model leaves people on the network and the network itself highly vulnerable; once a malicious actor is inside the network, they can wreak havok and access troves of data and attack other users and devices.
+
+``` mermaid
+    graph LR
+        A[Untrusted Traffic] -.-> B{Network Boundary};
+        B --> C[Network Drive];
+        C --> B;
+        B --> D[User];
+        D --> B;
+        B --> E[Printer];
+        E --> B;
+        C --> F(Attacker);
+        D --> F;
+        E --> F;
 ```
\ No newline at end of file