3 ms·

>find the latter harder to secure. I hope those "Infosec's" don't have Linux servers to secure ;)

by nix23 4y ago

oxfordmale 4y ago
The Linux instances are hosted on AWS and as such the responsibility of the SRE team :-) It is harder to find anti virus software that runs on Linux, at least I am told.
- nix23 4y ago
  >anti virus software Ah the snakeoil that drive a whole industry ;)
lima 4y ago
Linux servers don't usually travel the world. MDM tooling is pretty bad for Linux. You can make it work but it requires more effort than most corp teams are willing to put up with.
- nix23 4y ago
  >Linux servers don't usually travel the world. True but often 24x7 connected to the world...but yeah you are right, not often do you loose a whole server ;)
bri3d 4y ago
Endpoint security and production security are totally different things, usually done by different groups, with different threat models. I also wouldn't characterize it as "harder to secure" but rather "extra work to support." A homogenous endpoint fleet makes all IT tasks significantly easier, and endpoint management tools for Linux tend to be less mature and more difficult to work with.
- hyperman1 4y ago
  I expect this one to go the way of Internet Explorer. Only 1 browser to secure! Infosec requires an activeX compatible browser for installing expensive security contraptions. IT can't possibly tolerate Firefox! What, there are more browsers out there? What, Microsoft creates a new browser? What, marketing sent out a new campaign only viewable in Chrome? What, our own site doesn't work in Internet Explorer, and nobody noticed in 2 years? After fighting their own users for over a decade and looking very sad-kitten-face when every single one of their dastardly back-stabbing users did not follow the holy dictates from above, enterprise IT found out it was actually possible to secure a browser that was not internet explorer. I expect Linux to go the same way. In fact, it did just that for servers.
blacksmith_tb 4y ago
Different team I am sure (in an org of any size), but yes, the irony is obvious. I assume in lots of cases devs have a fair amount of leeway in installing stuff locally, maybe if you set up a VM you run a whole desktop in there.

>find the latter harder to secure. I hope those "Infosec's" don't have Linux servers to secure ;)

by nix23 4y ago

>find the latter harder to secure. I hope those "Infosec's" don't have Linux servers to secure ;)

The Linux instances are hosted on AWS and as such the responsibility of the SRE team :-) It is harder to find anti virus software that runs on Linux, at least I am told.

nix23 4y ago
>anti virus software Ah the snakeoil that drive a whole industry ;)

lima 4y ago

Linux servers don't usually travel the world. MDM tooling is pretty bad for Linux. You can make it work but it requires more effort than most corp teams are willing to put up with.

nix23 4y ago
>Linux servers don't usually travel the world. True but often 24x7 connected to the world...but yeah you are right, not often do you loose a whole server ;)

bri3d 4y ago

Endpoint security and production security are totally different things, usually done by different groups, with different threat models. I also wouldn't characterize it as "harder to secure" but rather "extra work to support." A homogenous endpoint fleet makes all IT tasks significantly easier, and endpoint management tools for Linux tend to be less mature and more difficult to work with.

hyperman1 4y ago
I expect this one to go the way of Internet Explorer. Only 1 browser to secure! Infosec requires an activeX compatible browser for installing expensive security contraptions. IT can't possibly tolerate Firefox! What, there are more browsers out there? What, Microsoft creates a new browser? What, marketing sent out a new campaign only viewable in Chrome? What, our own site doesn't work in Internet Explorer, and nobody noticed in 2 years? After fighting their own users for over a decade and looking very sad-kitten-face when every single one of their dastardly back-stabbing users did not follow the holy dictates from above, enterprise IT found out it was actually possible to secure a browser that was not internet explorer. I expect Linux to go the same way. In fact, it did just that for servers.

blacksmith_tb 4y ago

Different team I am sure (in an org of any size), but yes, the irony is obvious. I assume in lots of cases devs have a fair amount of leeway in installing stuff locally, maybe if you set up a VM you run a whole desktop in there.