• Honytawk@lemmy.zip
    link
    fedilink
    English
    arrow-up
    24
    arrow-down
    4
    ·
    2 days ago

    Because too many developers don’t understand cybersecurity.

    As is obvious from some of these comments here.

    Whats next, you want domain admin access to every computer/server you touch as well?

    • setVeryLoud(true);@lemmy.ca
      link
      fedilink
      arrow-up
      5
      arrow-down
      1
      ·
      16 hours ago

      What they don’t understand is their own machine can get compromised, and in turn compromise their accesses and other infrastructure in a pivot attack.

      Developers tend to have quite a lot of access, and some can even deploy to production. At my company, the dev workstations are even more locked down than the regular users’ computers for that reason, they can’t even leave the province.

      • dubyakay@lemmy.ca
        link
        fedilink
        arrow-up
        1
        arrow-down
        1
        ·
        15 hours ago

        I hate blanket generalization. You know when you get to that point that your company is over managed and understaffed, not creating a good work environment.

    • Ephera@lemmy.ml
      link
      fedilink
      English
      arrow-up
      11
      ·
      2 days ago

      Nah, sudo is fine. I can create users without touching the domain stuff. 🙃

    • MajorHavoc@programming.dev
      link
      fedilink
      arrow-up
      6
      arrow-down
      2
      ·
      2 days ago

      you want domain admin access to every computer/server you touch as well?

      Heh. I’ve had it. It’s not all it’s cracked up to be. And I didn’t even get one of those humorous “all I got was this lousy T-shirt” shirts.