4 ms·

That's what I do today. One VM per customer, on a pretty decent workstation. My host file system is encrypted. If I install the agent, it will complain about t

That's what I do today. One VM per customer, on a pretty decent workstation. My host file system is encrypted. If I install the agent, it will complain about the VM's file system not being encrypted. If I double encrypt, compilation times will go up quite a bit. Besides, running the agent in a VM will just be theater. If the host machine is compromised, no security in the VM will mean anything. I could just as well run the agent on dedicated VM with antivirus and disk encryption and just forget about it. Theater is theater. The audience would be the same, and they would see the same Play. However, it would not be ethical. It wold also lower my local security, as it's not impossible for malware to escape from a VM to the host machine. (I have worked for a VM vendor. I know a thing or two about VM's). I have reasonable good security on my devices. Complying faithfully with this requirement would lower my security. If I silo it in it's own LAN, on it's own hardware, it would lower my job satisfaction and my performance.

yjftsjthsd-h 5y ago
> If I double encrypt, compilation times will go up quite a bit. And that's the (poor) choice the company gets to make. Document/communicate that they're getting less work per money and let them deal with it.
- illud_tempus 5y ago
  I don't want to punish them for being stupid. I want them to not be stupid :) I like the challenges I work on. I work with very smart people. The managers I know well are mostly good people. But the company is growing fast, and there are new managers running loose every week, marking their territory and making signature changes. That's a bit exhausting. Ideally, someone would hit the breaks, and come up with a solution where the company get whatever certifucations they need, without pushing me into "I'm hurt, so I'll hurt them back by being less productive" mode. I enjoy being productive.
dusted 5y ago
Add an unecrypted disk on which you can store VMs that require VM-level encryption.

yjftsjthsd-h 5y ago

> If I double encrypt, compilation times will go up quite a bit. And that's the (poor) choice the company gets to make. Document/communicate that they're getting less work per money and let them deal with it.

illud_tempus 5y ago
I don't want to punish them for being stupid. I want them to not be stupid :) I like the challenges I work on. I work with very smart people. The managers I know well are mostly good people. But the company is growing fast, and there are new managers running loose every week, marking their territory and making signature changes. That's a bit exhausting. Ideally, someone would hit the breaks, and come up with a solution where the company get whatever certifucations they need, without pushing me into "I'm hurt, so I'll hurt them back by being less productive" mode. I enjoy being productive.

dusted 5y ago

Add an unecrypted disk on which you can store VMs that require VM-level encryption.