4 ms·
If I worked as a developer inside such an organisation, I'd quit. A sad side-effect of rigorous IT security is the lack of productivity and day-to-day frustrati
by stevoski 11y ago
If I worked as a developer inside such an organisation, I'd quit. A sad side-effect of rigorous IT security is the lack of productivity and day-to-day frustrations experienced by the staff.
I've experienced this myself inside a major central bank. Most development staff were a) demoralised and b) frequently adopting insecure work-arounds.
- bpicolo 11y agoYou mean you don't want to use two entirely separate computers just so you can access email? Paranoia in excess.
- bluedino 11y agoHey, we used to use a Mac for Internet and email and a Windows machine for "work", both on the same desk.
- tptacek 11y agoSo would I. But another way to look at this is, instead of "I'd quit", saying "they'd have to pay me 3x more to work in a place like that". At which point you can again start looking at it as an economic problem.
- greyboy 11y agoYou're right. I work at a place that does all but two of those, and I wouldn't if they didn't pay me as much as they do!
- tptacek 11y agoIf you work at a company with more than 500 employees that does all but two of those, I'd like to hear more about that. As I wrote those bullets, I filtered them through my experience of consulting for F500 companies, and when I found myself writing something I'd seen reliably deployed across entire organizations, I edited the bullet until that was no longer the case. About the closest I've come to seeing any of these bullets deployed reliably is Microsoft's developer training and deprecation of the standard C library, and that initiative was so out-of-the-ordinary that it was newsworthy, and widely reported. But to actually earn that bullet, Microsoft would need to deploy those same measures across all its contractors, and, more importantly, deploy them on internal IT and line of business systems, not just the Windows and Office codebases.
- tel 11y agoI imagine some government facilities could hit that mark—based loosely on descriptions of friends who have worked in such environments.
- greyboy 11y agoBingo.
- greyboy 11y agoSee the sibling commenter, but think government. Plus, the posts I read earlier didn't mention 'Fortune 500' or 'reliably' - and I'm glad you didn't use words like 'productive' and 'efficient'!