Hacker News new | ask | show | jobs
by viraptor 1200 days ago
For example connecting to an enterprisey VPN solution integrated into AD to access your exchange mail. Your options here may be limited to: install a supported system, or reverse engineer the provided configuration and pray you're a good enough expert in IPsec, Kerberos, and emulating a custom 2fa app which relies on secure boot and keys in TPM. Your onboarding starts tomorrow... and go!

From the policy side of things, you may run into "your laptop is not reporting that the latest windows or macos patches have been installed, you're required to have them installed".
1 comments
joezydeco 1200 days ago
The enterprise-y stuff isn't getting easier. My last Corp job, the VPN wouldn't let you in unless the active Win64-based agents were installed, alive, and scanning every file you create, download, or delete.

It was way easier to accept the Windows laptop and just run Virtualbox all day long in full screen.

link
wkat4242 1200 days ago
Well duh.. The company is responsible for its security and data privacy (think millions in GDPR fines). In order to do that they need to be able to secure the system, mandate patches, monitor suspicious behavior using EDR/XDR etc.

This sort of thing is not optional anymore and just dicking around with an unmanaged laptop and copying stuff onto unmanaged drives will be more and more difficult.

This stuff is not because of distrust or to make your life difficult. It's to protect the company and its customers.

What they should do though is support all business required OSes, not just Windows. Our company is pretty good at that and despite me doing all the work on managing non-windows compared to entire teams of Windows management people it works pretty well and users are happy :) Though I recently moved.

Not always about the amount of security software they have to deal with but these are just needed in this day and age.

I do understand your frustration though, as most enterprises don't care about developers if they're only a single-digit percentage of users, and have terrible IT processes like ITIL.

link
joezydeco 1199 days ago
What they should do though is support all business required OSes, not just Windows.

That's not an enterprisey thing to say. MacAfee, CarbonBlack, ViperSnot, etc all go for the low hanging fruit which is massive corps with 10K+ Windows seats. They won't support Linux ever and personally I get it. It's no big deal. You find ways to work around it.

link
em-bee 1199 days ago
having to work around security measures is a big deal. an ideal system should support linux. if it doesn't there should be no way to work around it either.
link
viraptor 1199 days ago
> It's to protect the company and its customers.

Also to make IT life easier. "You're getting updates when we say so, logs are getting shipped back and aggregated, every new binary started gets reported" approach saves so much time.

link