3 ms·

I'm honestly never surprised by any of this stuff. I've done some contracting and file access is always a shitshow. Picture this: > Intern or contractor gets

I'm honestly never surprised by any of this stuff. I've done some contracting and file access is always a shitshow. Picture this: > Intern or contractor gets hired. > Someone runs a script to create the user because permissions have turned into a rats nest that no human can understand > No one knows how the script works anymore, it's probably outdated and only does 60% of the job > User is added to a quagmire of groups > I cant access the Citrix apps > "Oh you don't have access and I'm waiting on that app owner to give you access, give me a few days" > Ok it works but I don't have a login for "the program I need" > "Looks like there's a licensing issue, give me a few days" > Ok it works but I don't have credentials for the database connection > "It's legitimately complicated, give me a few days" > IT gets tired of fucking with the back and forth on this 13 day old ticket "Just give him everything, so he can get X done" > Get access > Finally. Let's just dump this out into another file/folder/location so I don't have to go through hoops again and I can actually do my job. Now that dump is in a remote profile folder or /temp folder somewhere in a 100TB blob that will be backed up for 7 years or more. I've been on both sides.

ChoHag 2y ago
[dead]
bongodongobob 2y ago
To the comment below about measuring security... Usually this comes from putting security theater over pragmatism. Everything is so granular it's impossible to figure out what people need so you fuck around with it for a day and then give up and just give em local admin because actual work needs to be done. You can't get away from the fact that work requires write access. All those groups and policies are meaningless when the rubber hits the road. In the end you just have to hire people who can be trusted to do the right thing and not burn the house down.

ChoHag 2y ago

[dead]

bongodongobob 2y ago

To the comment below about measuring security... Usually this comes from putting security theater over pragmatism. Everything is so granular it's impossible to figure out what people need so you fuck around with it for a day and then give up and just give em local admin because actual work needs to be done. You can't get away from the fact that work requires write access. All those groups and policies are meaningless when the rubber hits the road. In the end you just have to hire people who can be trusted to do the right thing and not burn the house down.