3 ms·
All our eggs are in one basket
- theamk 5y agoI am guessing whoever wrote this never worked in IT or IT-related group in a large company? Because those are obviously false: > The reason is simple… most companies just run what everybody else runs, forget about IT and focus on the business. A lot of IT procedures scale with the number of machine types. If you are running bind with OpenBSD, who is going to notice that this machine has remotely exploitable vulnerability and needs updates ASAP? And who is going to fix its performance if the person who set it up left, and there are no other OpenBSD experts? It is the same with users. If you are allowing chromebooks, how long is IT going to spend debugging VPN and printer driver issues? I am not saying that there should ever be a single machine type, but each new type has a non trivial cost that needs to be carefully considered before allowing it. Otherwise you just open yourself to more cyberattacks - remote tool compromises are rare, while “I installed new OS and accidentally exported vulnerable service to internet” scenarios are so frequent they no longer hit the news.