Anon witnesses excellent security
-
“If you’re not paying for the product, then you are the product.”
The phrase has its uses, but shit like this is what happens when it's taken to the extreme.
The simple exception is free software (free as in freedom). It's really not that complicated.
-
The greentext reminds me of this FAQ entry: https://www.chiark.greenend.org.uk/~sgtatham/putty/faq.html#faq-vendor
A.9.17 As one of our existing software vendors, can you just fill in this questionnaire for us?
We periodically receive requests like this, from organisations which have apparently sent out a form letter to everyone listed in their big spreadsheet of ‘software vendors’ requiring them all to answer some long list of questions […]
We don't make a habit of responding in full to these questionnaires, because we are not a software vendor.
A software vendor is a company to which you are paying lots of money in return for some software. They know who you are, and they know you're paying them money; so they have an incentive to fill in your forms and questionnaires [...] because they want to keep being paid.
[...]
If you work for an organisation which you think might be at risk of making this mistake, we urge you to reorganise your list of software suppliers so that it clearly distinguishes paid vendors who know about you from free software developers who don't have any idea who you are. Then, only send out these mass mailings to the former.
I read only part of the URL and thought this was about puzzles. Never knew the guy made Putty as well
-
This post did not contain any content.
Nice. My response is my 2-week's notice.
-
It's "more secure" because there's a specific company to blame when it goes wrong.
My old boss called that "one neck to choke".
-
I am becoming increasingly more appreciative of the fact that I have root access to "my" company provided work device.
wrote last edited by [email protected]My boss went so far as to buy Macs because we have "special needs" (we don't) because otherwise we'd be forced to use the corporate locked down crap. I'm not a big fan of macos (prefer Linux), but root access sure is nice.
-
Yeesh. I would find a new job immediately. Absolutely unhinged behavior.
Yup, my boss would get my 2-weeks notice immediately. Like same day. I'm not putting up with that BS.
-
This post did not contain any content.
My last boss got rid of the pfSense routers because "open source is not secure". I argued that pfSense has been vetted over and over and over again. Nope. "Everyone can see the source code." That's the fucking point!
TBF, pfSense isn't the fastest routing, but at our small company is was more than sufficient.
-
There is an entire sub-industry and probably thousands of jobs being propped up by this stupid way of thinking about software. I can't be mad at it because it pays the bills for a few of my friends...
I could really see companies just fork open source and give it a tweak like UI or new switches...
Terrible.
-
Security through liability
The bigger you get the more this is a thing actually.
-
My boss went so far as to buy Macs because we have "special needs" (we don't) because otherwise we'd be forced to use the corporate locked down crap. I'm not a big fan of macos (prefer Linux), but root access sure is nice.
Wait till they learn about Jamf Pro and Mosyle
(Well… granted they also have to deploy it correctly after..) -
Wait till they learn about Jamf Pro and Mosyle
(Well… granted they also have to deploy it correctly after..)They did make us install Crowdstrike after 3-ish years of no spyware. We still have root access, they can just see every time I update my packages.
-
This post did not contain any content.
that's a cool fake story
-
My last boss got rid of the pfSense routers because "open source is not secure". I argued that pfSense has been vetted over and over and over again. Nope. "Everyone can see the source code." That's the fucking point!
TBF, pfSense isn't the fastest routing, but at our small company is was more than sufficient.
For a small to medium sized business pfsense is the only solution that makes sense. The only requirement is that you have a actual sysadmin on staff and not a vendor jockey.
-
“If you’re not paying for the product, then you are the product.”
The phrase has its uses, but shit like this is what happens when it's taken to the extreme.
Often times when you pay for the product, you are still the product.
-
For a small to medium sized business pfsense is the only solution that makes sense. The only requirement is that you have a actual sysadmin on staff and not a vendor jockey.
OPNsense is also a viable alternative.
-
I could really see companies just fork open source and give it a tweak like UI or new switches...
Terrible.
At one point my company made us buy Eclipse from a vendor because free software was not allowed. It had no tweaks or support, just out of date Eclipse that I had to wait for purchasing to get
-
Often times when you pay for the product, you are still the product.
That is just a fact at this point
-
This post did not contain any content.
Vim? Oh wow. I'd be looking into a USB Keyboard that types the entire source code of vim into the machine, assuming there isn't an easier option.
-
This post did not contain any content.
Don't forget your new 32 character/symbol/number/nordic rune passwords that will need to be changed every 17 days.
-
I could really see companies just fork open source and give it a tweak like UI or new switches...
Terrible.
I could really see companies just fork open source and give it a tweak like UI or new switches…
They should not be able to do that if it comes under non commercial licence
