1360
No Microslop for me (thelemmy.club)
submitted 6 months ago* by to c/programmer_humor@programming.dev
376 comments fedilink hide all child comments
 
you are viewing a single comment's thread
view the rest of the comments
[–] 52 points 6 months ago (6 children)

Smaller companies, maybe. But bigger companies will have a 'Security and Compliance' department which will force everyone to use a company-supported platform. It goes beyond OS too. Unapproved apps, even if you are allowed to install them, may not connect to company resources.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 6 child comments
    •
  • [–] 19 points 6 months ago* (1 child)

    Managing centralized security and device management correctly on multiple OSes must be a nightmare. From EDRs to app and device provisioning.

    You should do dev work in devcontainers anyway.

    Not that it's an excuse or that I'm happy with that, but I can totally understand why companies do that, and tbh I'd rather see a properly secured than have the option to run Linux.

    But I'm biased, because I used to do Red Teamings, and the things I've seen...

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 1 child comment
    •
  • [–] 6 points 6 months ago

    You should do dev work in devcontainers anyway.

    Devcontainers work for Visual Studio Code when developers are more than happy to click their way through running builds and debugging problems. But, as someone whose workflow is optimized for the command-line, they can fuck off.

  • permalink
  • fedilink
  • source
  • parent
  • [–] 3 points 6 months ago (1 child)

    for a senior engineer position though? That seems counterproductive. I would expect it of one of the entry levels or non-it but forcing a windows ecosystem on a development or engineering sector screams red flag to me.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 1 child comment
    •
  • [–] 12 points 6 months ago* (last edited 5 months ago)

    A senior engineer obviously needs (and knows how to handle) considerably more access to their workstation and company IT infrastructure than the average employee. On the other hand, I've occasionally read complaints from IT security types about engineers being way too eager to install sketchy stuff.

    There's some truth to those complaints. I might need to try out several libraries and tools to see what works best for a certain use case. Is that new one with 15 stars on Github actually safe? Are all of its dependencies? How many developers perform a task like that in a sandbox? How many of those perform a thorough audit before taking it out of the sandbox?

  • permalink
  • fedilink
  • source
  • parent