• asdfasdfasdf@lemmy.world
    link
    fedilink
    arrow-up
    23
    arrow-down
    3
    ·
    1 day ago

    So what should a decent IT department do to give developers the access they need to do their job while maintaining a decent level of security?

    Give them a Linux machine?

    • egonallanon@lemm.ee
      link
      fedilink
      arrow-up
      8
      ·
      14 hours ago

      This doesn’t remove security and compliance requirements for the business though. For our Linux endpoints we still deploy an AV on them and limit the user’s ability to add exclusions.

    • ikt@aussie.zone
      link
      fedilink
      English
      arrow-up
      5
      arrow-down
      6
      ·
      15 hours ago

      You ever worked in an average corporate job? You’re missing out on so much

      The IT guys barely know Windows, they’ve most likely never even heard of Ubuntu, could you imagine such a thing :|

      • Black616Angel@discuss.tchncs.de
        link
        fedilink
        arrow-up
        4
        ·
        16 hours ago

        As someone who does exactly that right now. Yes.

        You need a Linux machine in a separate network with separate firewall rules and the developer has to devote a bit of their time to managing that machine.
        It can even be centrally managed, if you have the capacity.

        But why would you want that? To secure your shit while allowing the devs to to what they like to their equipment.

        • stoy@lemmy.zip
          link
          fedilink
          arrow-up
          4
          ·
          15 hours ago

          In an ideal world I agree with you, but when resources are limited, running a separate environment is not allways realistic.

          • computergeek125@lemmy.world
            link
            fedilink
            English
            arrow-up
            5
            ·
            13 hours ago

            ^ this

            As an example of scale, my company has an entire IT team of a handful of people for managing such an environment for a thousand or so devs and engineers.

            • stoy@lemmy.zip
              link
              fedilink
              arrow-up
              2
              ·
              11 hours ago

              My past role was a combined role of these:

              Helpdesk technician
              VIP technician
              Linux system administrator

              We didn’t effectively administrate the Linux environment, I was the only linux admin at the company, and I wasn’t even doing it full time.