4 ms·
Which business and legal requirements, do you think, bind most small and medium enterprises to lock down workstations while engineers across Silicon Valley have
by closeparen 4y ago
Which business and legal requirements, do you think, bind most small and medium enterprises to lock down workstations while engineers across Silicon Valley have root on their MacBooks from huge important companies?
- number6 4y agoMoney for lawyers
- easton 4y agoGoogle doesn’t let devs store IP on their workstations except in very rare circumstances (per this thread and the BeyondCorp papers), and in those rare circumstances I’m willing to bet you either don’t have root or there’s way more auditing turned on. Most bigcos are the same way, there’s a way to get root but there’s also security software or policies to counteract damage you could do. With most hardcore “zero-trust” setups you consider a device’s posture based on its current state and don’t take into account whether or not the user has admin rights (what do you care how what rights they used to install bad software, you just care that they installed bad software). No admin rights typically means nobody has time to do something better for end users or there’s a regulatory requirement (at the same time, bigcos can throw a sandboxed VM up in their data center that can’t access PII if devs need more access).