Hacker News new | ask | show | jobs
by viraptor 1200 days ago
> bypass windows based security systems

This is reasonable in a way. I don't think the person who commented this originally understands why, but still...

Larger companies often use remote device management / monitoring. Not being a part of the system means you won't get the same enforcement on updates, firewall, internal ssl certificates, etc. It's not strictly bypassing, but it's potentially not complying either.

2 comments

> Not being a part of the system means you won't get the same enforcement on updates, firewall, internal ssl certificates, etc. It's not strictly bypassing, but it's potentially not complying either

A good company makes sure you can't bypass it.

On our platform if your computer is not managed you're not even getting on the network as it requires an automatically issued certificate for wifi and in most cases for the wired network too.

All the cloud services like MS365 we use will block you from logging in too. If you're managed but stuff is out of date you're rerouted to a mitigation subnet that just offers resources to fix it.

And we're not even a high security company like financial, military tech or healthcare.

We do support PC, Mac and Ubuntu and RedHat Linux though.

Very true, I've seen the same happen with users that get MacBooks. Until recently[0].

0. https://www.apple.com/newsroom/2021/11/apple-introduces-appl...

Apple management has been possible though MDM profiles way way longer than 2021. I set up complete management for our Mac fleet since 2017 and it was already around then.