5 ms·

The class of risky employees should perhaps be limited to Chromebooks only.

hans1729 5y ago
Unfortunately I don’t think belittling these employees helps much here, especially considering how good a dedicated phisher can become at their craft.
d3ad1ysp0rk 5y ago
CEOs?
29083011397778 5y ago
This may work some of the time, but expect "I need $windows_program" to foul your chances of this. It may not always be legitimate, but telling heavy-duty transport mechanics they can't have Cummins or Bendix software (for engines and brakes) to help them diagnose, when that's the only output for troubleshooting supported by the OEM, will not end well.
- jmrm 5y ago
  This makes me thing: When we are going to see those Windows software directly on the web? For me makes a lot of sense being able to sell a software subscription instead of a one time product sell, and for the other hand making available to use in any device in the world with internet connection. This also can be done like Chrome apps (like Docs) or some Electron apps (like Spotify), where you can use content without Internet for some time without any problem. For a mechanic who is looking for the amount of torque needed on a bolt this could be perfectly viable, for example.
  - 29083011397778 5y ago
    > For a mechanic who is looking for the amount of torque needed on a bolt this could be perfectly viable, for example. We're going to start talking past each other pretty quickly if you think this is worthy of a (software) service subscription. Torque specs belong in a manual (ideally on corporate intra-net or paper); I'm talking about when the engine is deeply unhappy, and you need more to go on than a driver reporting a yellow check light. In the case of the latter, I'd say it absolutely deserves to be a 20 year old program (which tend to be lighter) that runs entirely offline. The last thing any garage wants to do is chase hardware requirements or search for a wifi signal either out in the yard, or in between hoists, lifts, and miscelleaneous heavy equipment / tooling - all of which tend to trash a wifi signal.
  - jacobr1 5y ago
    This is already a thing. Plenty of companies use managed virtual desktops via the web for this purpose. AWS even offers "Workspaces" as service for this. Though it doesn't solve the "without the internet" problem.
stjohnswarts 5y ago
This is why people don't like IT staff a lot of time. They think their needs of making their own jobs easier outweigh those of the organization and getting stuff done.
- jacobr1 5y ago
  The bigger problem is that the IT staff is often so ludicrously underfunded, that they ARE a bottleneck. There probably are ways to manage team/personal productivity with organization needs, but without time to dedicate to analysis, you get blanket solutions. Which is another reason why self-provisioned SaaS rather than IT managed systems are big.
harikb 5y ago
The software we develop should have better interfaces too. A security expert should also review stuff created by UX. Back when “I love you” virus started, we had pointed out something simple as “open for read” vs “open as in run/execute” should not have had the same interface. All the new security enhancements we have today - don’t run as admin, alerts to request privileged access, sandboxing - all of them existed for a decade, but the software vendors never had the guts to weigh security higher than UX
- alternatetwo 5y ago
  Microsoft has done more damage than anybody by hiding known extensions by default. Even the script kiddies fall into that trap, my old school got infected by a .pdf.js.js ...

Unfortunately I don’t think belittling these employees helps much here, especially considering how good a dedicated phisher can become at their craft.

d3ad1ysp0rk 5y ago

CEOs?

29083011397778 5y ago

This may work some of the time, but expect "I need $windows_program" to foul your chances of this. It may not always be legitimate, but telling heavy-duty transport mechanics they can't have Cummins or Bendix software (for engines and brakes) to help them diagnose, when that's the only output for troubleshooting supported by the OEM, will not end well.

jmrm 5y ago
This makes me thing: When we are going to see those Windows software directly on the web? For me makes a lot of sense being able to sell a software subscription instead of a one time product sell, and for the other hand making available to use in any device in the world with internet connection. This also can be done like Chrome apps (like Docs) or some Electron apps (like Spotify), where you can use content without Internet for some time without any problem. For a mechanic who is looking for the amount of torque needed on a bolt this could be perfectly viable, for example.
- 29083011397778 5y ago
  > For a mechanic who is looking for the amount of torque needed on a bolt this could be perfectly viable, for example. We're going to start talking past each other pretty quickly if you think this is worthy of a (software) service subscription. Torque specs belong in a manual (ideally on corporate intra-net or paper); I'm talking about when the engine is deeply unhappy, and you need more to go on than a driver reporting a yellow check light. In the case of the latter, I'd say it absolutely deserves to be a 20 year old program (which tend to be lighter) that runs entirely offline. The last thing any garage wants to do is chase hardware requirements or search for a wifi signal either out in the yard, or in between hoists, lifts, and miscelleaneous heavy equipment / tooling - all of which tend to trash a wifi signal.
- jacobr1 5y ago
  This is already a thing. Plenty of companies use managed virtual desktops via the web for this purpose. AWS even offers "Workspaces" as service for this. Though it doesn't solve the "without the internet" problem.

stjohnswarts 5y ago

This is why people don't like IT staff a lot of time. They think their needs of making their own jobs easier outweigh those of the organization and getting stuff done.

jacobr1 5y ago
The bigger problem is that the IT staff is often so ludicrously underfunded, that they ARE a bottleneck. There probably are ways to manage team/personal productivity with organization needs, but without time to dedicate to analysis, you get blanket solutions. Which is another reason why self-provisioned SaaS rather than IT managed systems are big.

harikb 5y ago

The software we develop should have better interfaces too. A security expert should also review stuff created by UX. Back when “I love you” virus started, we had pointed out something simple as “open for read” vs “open as in run/execute” should not have had the same interface. All the new security enhancements we have today - don’t run as admin, alerts to request privileged access, sandboxing - all of them existed for a decade, but the software vendors never had the guts to weigh security higher than UX

alternatetwo 5y ago
Microsoft has done more damage than anybody by hiding known extensions by default. Even the script kiddies fall into that trap, my old school got infected by a .pdf.js.js ...