3 ms·
It's such a nightmare at my current job as well. Everything always just breaks and needs investigating how to fix. Even putting aside the MITM and how horrendo
by noroot 10mo ago
It's such a nightmare at my current job as well. Everything always just breaks and needs investigating how to fix.
Even putting aside the MITM and how horrendous that is, the amount of time lost from people dealing with the fallout got to have cost so much time (and money). I can't fathom why anyone competent would want to implement this, let alone not see how much friction and safety issues it causes everywhere.
- dcminter 10mo ago> I can't fathom why anyone competent would want to implement this Compliance. Big financial orgs. and the like must show that they are doing something about "data loss" and this, sadly, is the easiest way to do that. There's money in it if you can show them a better way.
- musicale 10mo ago> Compliance With anti-security policies that: break TLS, thwart certificate pinning, encourage users to ignore certificate errors, expand the attack surface, increase data leak risks, etc. All while wasting resources and money. Zscaler and its ilk have conned the IT world. Much like Crowdstrike did before it broke the airlines. Not to mention: > We only use data or metadata that does not contain customer or personal data for AI model training. How reassuring. https://www.zscaler.com/blogs/company-news/zscalers-commitment-to-responsible-ai https://www.zscaler.com/blogs/company-news/zscalers-commitme...
- deleted 10mo ago[deleted]
- crote 10mo agoBig emphasis on the "show you're doing something" part: actually being effective isn't a requirement.