233

My corporate anti-virus doesn't let me add scanning exclusions (i.imgflip.com)

submitted 1 day ago by joyjoy@lemm.ee to c/programmer_humor@programming.dev

46 comments fedilink hide all child comments

you are viewing a single comment's thread
view the rest of the comments

[-] asdfasdfasdf@lemmy.world 23 points 1 day ago

So what should a decent IT department do to give developers the access they need to do their job while maintaining a decent level of security?

Give them a Linux machine?

[-] egonallanon@lemm.ee 11 points 1 day ago

This doesn't remove security and compliance requirements for the business though. For our Linux endpoints we still deploy an AV on them and limit the user's ability to add exclusions.

[-] AtariDump@lemmy.world 16 points 1 day ago

[-] Eyekaytee@aussie.zone -2 points 1 day ago

You ever worked in an average corporate job? You're missing out on so much

The IT guys barely know Windows, they've most likely never even heard of Ubuntu, could you imagine such a thing :|

[-] luciferofastora@lemmy.zip 2 points 7 hours ago

Huh, weird. The IT guys I work with don't just know Windows, when I joked about wanting a Linux instead they pointed out that we have software devs using Linux too. I'd need some reason to request it, but if I know the right people (and more particularly, what their favourite snacks are), I could probably get it approved.

(Doesn't actually help me, given I'm stuck using proprietary tools that I couldn't get to run with wine, but at least the option is there. And that's a big corp.)

[+] stoy@lemmy.zip -9 points 1 day ago

A machine that takes extra time and skills to manage?

[-] Black616Angel@discuss.tchncs.de 5 points 1 day ago

As someone who does exactly that right now. Yes.

You need a Linux machine in a separate network with separate firewall rules and the developer has to devote a bit of their time to managing that machine.
It can even be centrally managed, if you have the capacity.

But why would you want that? To secure your shit while allowing the devs to to what they like to their equipment.

[-] stoy@lemmy.zip 4 points 1 day ago

In an ideal world I agree with you, but when resources are limited, running a separate environment is not allways realistic.

[-] computergeek125@lemmy.world 5 points 23 hours ago

^ this

As an example of scale, my company has an entire IT team of a handful of people for managing such an environment for a thousand or so devs and engineers.