3 ms·

Try using MacOS in an enterprise. They locked the fucking power settings on me, even though I use my own power at home. So it goes to sleep after 10 minutes wit

Try using MacOS in an enterprise. They locked the fucking power settings on me, even though I use my own power at home. So it goes to sleep after 10 minutes with no mouse movement, drops the VPN and all my SSH sessions, and then forgets my monitor layout. Computers work pretty damn well most of the time, but as soon as enterprise IT gets their hands on it, they clog it up with poorly written, well marketed security software. We have shit like privilege managers running so that we can install "whitelisted" apps. Still have MS endpoint protection, which is a total piece of shit. All the MDM shit that runs in the background, some password sync manager, a goddamn locally installed proxy that hijacks all your web traffic. JAMF always in there fucking crashing and doing who knows what. And we migrated our laptops when our company was bought out. And so the entire security suite was completely different. All the old security software was removed, but left cruft, and extensions and shit all over the computer. All our computers run like total dogshit until an OS reload. All this bullshit that makes our productivity crawl to a halt, just so that they can check some boxes on a security audit.

grosswait 4y ago
Organizations are being denied cyber liability coverage for not having EDR across the board. Without the data to prove what didn’t happen, most regs require assuming the worst, possibly resulting in hefty fines. Unfortunately the current cyber landscape does not favor the worker.
pdimitar 4y ago
My sympathies! Sounds like a nightmare story indeed and I might refuse a company's offer on the basis of having to go through this alone... Although can't deny that for the most of us US salaries are pretty damn appealing. Truthfully, if I was director of IT and security, I'd likely just source all laptops in my department and preinstall everything needed and then ship the machine to the new employee, giving them passwords through a secure channel e.g. Signal / encrypted Telegram chats / PGP'd mail etc. I've worked once on a corporate Linux laptop and it was a nightmare. The machine in particular wasn't very good and was easily overheating and its fans were always spinning, and of course the VPN worker crashed every 3-4h or so -- which still wasn't a big deal for a 8h working day, mind you, but you did have to always be prepared for the next thing you're doing to fail with a mysterious network failure. Again, sympathies. It sounds like a shit show. Another thing I'd consider would just be to ship everyone the same 8GB RAM laptops that all remote into cloud instances. Machine stolen? Tokens / passwords / keys expire every hour anyway even if the IT is asleep at the wheel for that one hour, so who cares.
crazygringo 4y ago
I feel your annoyance about it going to sleep, but you should be able to run the built-in 'caffeinate' command in the terminal to prevent sleep -- you don't need to install Amphetamine. If for some reason that didn't work, you can also find a long YouTube video to play on mute -- videos disable sleep as well.
em500 4y ago
Right. I always thought that a non-trivial part of the bad rep of Windows comes from the fact that lots of people were forced to use it at work with tons of enterprise junkware that was barely distinguisable from unremove malware. My home Windows machines on much weaker hardware always ran a lot better than machines at work. And in the past few years it feels like my corporate JAMF managed MacBook is heading in the same direction.

grosswait 4y ago

Organizations are being denied cyber liability coverage for not having EDR across the board. Without the data to prove what didn’t happen, most regs require assuming the worst, possibly resulting in hefty fines. Unfortunately the current cyber landscape does not favor the worker.

pdimitar 4y ago

My sympathies! Sounds like a nightmare story indeed and I might refuse a company's offer on the basis of having to go through this alone... Although can't deny that for the most of us US salaries are pretty damn appealing. Truthfully, if I was director of IT and security, I'd likely just source all laptops in my department and preinstall everything needed and then ship the machine to the new employee, giving them passwords through a secure channel e.g. Signal / encrypted Telegram chats / PGP'd mail etc. I've worked once on a corporate Linux laptop and it was a nightmare. The machine in particular wasn't very good and was easily overheating and its fans were always spinning, and of course the VPN worker crashed every 3-4h or so -- which still wasn't a big deal for a 8h working day, mind you, but you did have to always be prepared for the next thing you're doing to fail with a mysterious network failure. Again, sympathies. It sounds like a shit show. Another thing I'd consider would just be to ship everyone the same 8GB RAM laptops that all remote into cloud instances. Machine stolen? Tokens / passwords / keys expire every hour anyway even if the IT is asleep at the wheel for that one hour, so who cares.

crazygringo 4y ago

I feel your annoyance about it going to sleep, but you should be able to run the built-in 'caffeinate' command in the terminal to prevent sleep -- you don't need to install Amphetamine. If for some reason that didn't work, you can also find a long YouTube video to play on mute -- videos disable sleep as well.

em500 4y ago

Right. I always thought that a non-trivial part of the bad rep of Windows comes from the fact that lots of people were forced to use it at work with tons of enterprise junkware that was barely distinguisable from unremove malware. My home Windows machines on much weaker hardware always ran a lot better than machines at work. And in the past few years it feels like my corporate JAMF managed MacBook is heading in the same direction.