[valleyjo]

When I worked on azure compute we had dedicated laptops that were basically bricks. All they did was connect to production. No internet no admin rights limited set of software. This is a pretty reasonable security move.

This approach from google is basically the opposite. No internet on your workstation but your laptop works like normal.

[konschubert]

The flip side of this is that you can ease the paranoia on the coding machines. You should probably be ready for 5% of them being compromised at any given time.

[jppittma]

The workstations are the coding machines. You're not allowed to have google code on your laptop.