• 0 Posts
  • 31 Comments
Joined 2 years ago
cake
Cake day: June 22nd, 2023

help-circle

  • I buy a license for Crossover every year to support Codeweavers. I know its not much but its what I can do to show my support for such an amazing software (talking about WINE).

    It’s great to see they are hiring, but I do hope they arent being rash with these openings. Ive work my fair share of tech companies and some have a culture to open positions because of KPIs and then 6 months to a year later have a massive layoff because they were completely off with their projections so now they have to cut positions which include some of the people hired well before the hiring bananza.


  • DNSSEC is a means of authenticating the data receives was not tampered with, such as MITM attacks, thus ensuring data integrity. It uses PKI but it’s not an alternative to DoH or DoT which encrypts the DNS traffic, either over HTTPS or TLS, providing confidentiality.

    DNSSEC can be used in conjunction with DoH or DoT to achieve the Security CIA triad - Confidentiality, Integrity, Authenticity.



  • As a Sysadmin I would be immediately looking for a new job if management wanted to snoop on employees machines via a screen recording/capturing software. I wouldn’t want it done to me and I sure as hell wouldn’t feel right deploying such spyware!

    Not to mention it immediately errodes the fragile trust between IT and the rest of the company and troubleshooting or implementing changes becomes that much harder.

    What I tell EVERY person, not just coworkers, is DO NOT TREAT THIS AS A PEROSNAL DEVICE. Keep your personal stuff off the work machine.

    It’s not even because of snooping by the company. What if the company performs a remote wipe after an unexpected termination? If that device is the only place you kept important documents… Well, you are up shit creek without a paddle.

    Now, the type of remote assist tools we have make it very clear to the other person we are connected and can see their screen(s) - connection notifications, persistent banners and disconnect notifications. Every team I’ve worked on makes it protocol to ASK the employee if we can remote in.

    It might seem like a formality but honestly if someone hasn’t heeded our advice and is logged into their banks site I don’t want to see it! It’s very much a CYA policy for IT, but it also shows respect for other employees privacy.


  • And then those “enterprise features” get borked on the next major macOS release.

    Oh you wanted to ensure your remote assist tool could be granted the proper permissions to work? Well screw you! We took away the ability to grant Screen Recording permissions through a MDM profile. Suck it!

    In case you didn’t know the Screen Recording permission is needed to be able to view the display/screen in applications like Zoom when screen sharing or for remote assist through Screen connect.

    Apple’s “reason” was essentially “… Think of the users! It’s for their security”.










  • I hate to say it but company data is most definitely on personal computers.

    This is why stuff like adaptive MFA and DLP are a thing. What most people don’t know is if DLP is properly implemented the IT team/department have records of who, when, where, and what device were used to not just access/download data/files.

    The problem is a lot of companies don’t properly implement DLP because it’s not a turn key solution. You need to properly classify your data first and that requires essentially a company wide audit with buy-in from all levels of management. After the classifications you can then implement restrictions and compensating controls.

    Back in the day you could just block USB/network transfer, but if you have data accessible outside of a corporate network you then need to implement conditional access/adaptive MFA where only registered devices are permitted to access certain systems.





  • Google is removing the VPN and free shipping (which was only available on some photo orders) to make way for more “in demand features”?

    I could understand if this was coming from a smaller company with more limited resources and staff, but that’s not Google by any means.

    They really don’t care about the poor reputation the general public has of them regarding shutting down services on a whim.

    What’s worse though is they don’t seem to realize that, with the exception of Android and maybe Google Docs, their services/products are easily replaced by competitor offerings.

    In my opinion it’s a good thing if Google gets knocked of their high horse and allow competition to flourish in their place.