4 ms·

This is 2025. People who buy Windows get a Chromium based browser where Google Search is not the default yet they go to Google. I have a Mac, don’t use Chrome

This is 2025. People who buy Windows get a Chromium based browser where Google Search is not the default yet they go to Google. I have a Mac, don’t use Chrome or a Chromium based browser and haven’t had an issue. And you are forced to install Chrome on Windows? Besides wouldn’t you want your applications to install without requiring admin access?

ocdtrekkie 1y ago
Wait, are you suggesting you don't see an issue with people being able to install a web browser on a PC they don't own?
- scarface_74 1y ago
  Hopefully you are being sarcastic. I have never in 30 years across 10 companies including one BigTech company not been trusted with admin access to my computer. However, admins have been able to lock down computers to not allow them to install software at least since Windows NT.
  - ocdtrekkie 1y ago
    No I am honestly terrified that the industry is that bad. Good Lord. You're telling me you've never worked somewhere which has ever complied with a bare minimum IT security policy ever? Has nobody where you work heard of defense in depth? We have built a temple to madness.
    - scarface_74 1y ago
      I worked at Amazon - AWS Professional Services to be exact. They trusted their employees with admin access. You had to toggle an option and click on a box saying you would be responsible with admin access. I think AWS knows a little bit about defense in depth… Every blue badge employee at Amazon as far as I know has the ability to get Admin access by clicking on a button on the home built app. You also might be surprised that in the last 8 years since working with AWS technology, I’ve never worked at a company where I didn’t have Admin access to an AWS account. At AWS we could create as many sandbox accounts as we wanted to with Admin access and every client I have worked with for thd pass five+ years I’ve asked for a none production account with the “PowerUser” policy + iam::* permissions - which is admin in all but name.
      - ocdtrekkie 1y ago
        > I think AWS knows a little bit about defense in depth… What you're telling me is that they do not. And that every mom and pop shop IT outfit is more qualified to secure a server than Amazon is.
        scarface_74 1y ago
        I am suppose to believe a random HN poster knows more about governing a large internal IT department - actually the second largest employer in the US and the largest cloud provider? If so, I still know some people inside AWS. I’m sure they will be willing to back up a shit ton of money to your doorstep to teach them the error of their ways.
        ocdtrekkie 1y ago
        All I'm saying, is what you've told me is so foundationally bad that instead of being a sort of off-topic comment in this post, it should be the #1 headline on HN. I'm frankly stunned. I don't really care if I don't have enough authority to be believable to you or not, I never asked you to. But most community college professors for the IT trade degrees could explain it if you asked. And oh, I'm sure Amazon folks would have some high buzzwordy reasons to suggest this is okay in their environment. Everyone bad at security does it.
        scarface_74 1y ago
        Yes, because community college professors know the latest best practices from spending years in the industry working with large enterprises and managing employees at scale… I would be shocked if most BigTech developers don’t have admin access to their computers and some type of MDM software that automatically disable disallowed apps. When was the last time you heard about an exploit to AWS’s or GCPs internal systems based on employee installed software? It might shock you, that it started at Google with the zero trust initiative. But AWS was rapidly moving away from requiring VPNs to gain access to any of their internal systems.

ocdtrekkie 1y ago

Wait, are you suggesting you don't see an issue with people being able to install a web browser on a PC they don't own?

scarface_74 1y ago
Hopefully you are being sarcastic. I have never in 30 years across 10 companies including one BigTech company not been trusted with admin access to my computer. However, admins have been able to lock down computers to not allow them to install software at least since Windows NT.
- ocdtrekkie 1y ago
  No I am honestly terrified that the industry is that bad. Good Lord. You're telling me you've never worked somewhere which has ever complied with a bare minimum IT security policy ever? Has nobody where you work heard of defense in depth? We have built a temple to madness.
  - scarface_74 1y ago
    I worked at Amazon - AWS Professional Services to be exact. They trusted their employees with admin access. You had to toggle an option and click on a box saying you would be responsible with admin access. I think AWS knows a little bit about defense in depth… Every blue badge employee at Amazon as far as I know has the ability to get Admin access by clicking on a button on the home built app. You also might be surprised that in the last 8 years since working with AWS technology, I’ve never worked at a company where I didn’t have Admin access to an AWS account. At AWS we could create as many sandbox accounts as we wanted to with Admin access and every client I have worked with for thd pass five+ years I’ve asked for a none production account with the “PowerUser” policy + iam::* permissions - which is admin in all but name.
    - ocdtrekkie 1y ago
      > I think AWS knows a little bit about defense in depth… What you're telling me is that they do not. And that every mom and pop shop IT outfit is more qualified to secure a server than Amazon is.
      - scarface_74 1y ago
        I am suppose to believe a random HN poster knows more about governing a large internal IT department - actually the second largest employer in the US and the largest cloud provider? If so, I still know some people inside AWS. I’m sure they will be willing to back up a shit ton of money to your doorstep to teach them the error of their ways.
        ocdtrekkie 1y ago
        All I'm saying, is what you've told me is so foundationally bad that instead of being a sort of off-topic comment in this post, it should be the #1 headline on HN. I'm frankly stunned. I don't really care if I don't have enough authority to be believable to you or not, I never asked you to. But most community college professors for the IT trade degrees could explain it if you asked. And oh, I'm sure Amazon folks would have some high buzzwordy reasons to suggest this is okay in their environment. Everyone bad at security does it.
        scarface_74 1y ago
        Yes, because community college professors know the latest best practices from spending years in the industry working with large enterprises and managing employees at scale… I would be shocked if most BigTech developers don’t have admin access to their computers and some type of MDM software that automatically disable disallowed apps. When was the last time you heard about an exploit to AWS’s or GCPs internal systems based on employee installed software? It might shock you, that it started at Google with the zero trust initiative. But AWS was rapidly moving away from requiring VPNs to gain access to any of their internal systems.