4 ms·
About the dev machines, yes, many places do consider them (and they are) high risk. I'd add to your list, the source code, future plans, etc. I do some basic
by efortis 6y ago
About the dev machines, yes, many places do consider them (and they are) high risk. I'd add to your list, the source code, future plans, etc.
I do some basic steps to harden my dev machines:
- A Chrome profile without extensions for developing for the most part.
- The localhost is not 127.0.0.1 but a random IP under 127/8, with a random port. See https://news.ycombinator.com/item?id=20028108 https://news.ycombinator.com/item?id=20028108
- When creating SSH keys, add extra rounds (e.g. `ssh-keygen -a 64`) to make it harder to brute-force the passphrase.