|
Quote: use their work computers for personal and potentially risky activities
Therein lies a problem, more so if you can't block stuff like yahoo mail. We do so at the firewall but that is only on site.
A "well protected" corp laptop: Highly interlocked, protected device, with limited compute capabilities.
If you can keep your head while those about you are losing theirs, perhaps you don't understand the situation.
|
|
|
|
|
It's honestly a question of employee training and selection. If an employee has not the honesty, intelligence and integrity necessary to not f* around with company's equipment he has to go. When unapologetically laying off any employee stupid enough to not grasp the basic computer security concepts after 40 years of PC existance becomes the norm, computer security becomes the norm as well.
Dura lex, sed lex.
GCS d--(d+) s-/++ a C++++ U+++ P- L+@ E-- W++ N+ o+ K- w+++ O? M-- V? PS+ PE- Y+ PGP t+ 5? X R+++ tv-- b+(+++) DI+++ D++ G e++ h--- r+++ y+++* Weapons extension: ma- k++ F+2 X
|
|
|
|
|
I love your perfect world.
Alas, mine has a few very smart people who occasionally make dumb mistakes.
If you can keep your head while those about you are losing theirs, perhaps you don't understand the situation.
|
|
|
|
|
Occasional dumb mistakes are one thing, many people though cultivate a path of willfull ignorance and criminal negligence.
GCS d--(d+) s-/++ a C++++ U+++ P- L+@ E-- W++ N+ o+ K- w+++ O? M-- V? PS+ PE- Y+ PGP t+ 5? X R+++ tv-- b+(+++) DI+++ D++ G e++ h--- r+++ y+++* Weapons extension: ma- k++ F+2 X
|
|
|
|
|
Here, we refer to them as politicians.
If you can keep your head while those about you are losing theirs, perhaps you don't understand the situation.
|
|
|
|
|
|
Also known as the Inverse Stopped Clock
|
|
|
|
|
Quote: Dura lex, sed lex Maybe that's where Monty Python got "Cruel, but fair."
|
|
|
|
|
Well, John Cleese was a latin teacher...
GCS d--(d+) s-/++ a C++++ U+++ P- L+@ E-- W++ N+ o+ K- w+++ O? M-- V? PS+ PE- Y+ PGP t+ 5? X R+++ tv-- b+(+++) DI+++ D++ G e++ h--- r+++ y+++* Weapons extension: ma- k++ F+2 X
|
|
|
|
|
|
What you are missing is that some of these people were hired for things other than their computer skills. That guy who is dumber than a firehose around IT may be the companies best lawyer.
The IT systems are (unfortunately) configured for the average person - not developers. Unfortunately IT might not have enough resources to solve more than the average - and developers get caught up in it. . . and to be fair - I've seen my fair share of developers doing pretty stupid things as well.
Agree you need to trust people to drive safely - but enforcing seat belts is not such a bad thing. You might even find yourself thanking the seatbelts at some point when you had an "In a hurry, not thinking, just send this file, brain fade."
On the other side of the fence - provided you are not a cowboy - most IT staff (given the time) would be happy to set you up better. Speak with them - they should be your friends - not your enemies. Most of the time they can come up with something.
|
|
|
|
|
It was mainly the managers who were the culprits where I last worked. Could not believe how stupid a couple of them were.
|
|
|
|
|
Indeed.
"In testa che avete, Signor di Ceprano?"
-- Rigoletto
|
|
|
|
|
Now is a good time to remind you of one Wolfgang Amadeus Mozart and Allegri’s “Miserere mei Deus”, which the Vatican absolutely forbid to be copied, and prelates looked out for anyone who might be doing just that while it was being sung. However, the teenage Mozart went to the Tenebrae and listened. That night at home he wrote out the whole thing. note perfect, in full, all parts, in all its contrapuntal glory.
So, if you code to 'Mozart' standards ... 
|
|
|
|
|
So you cannot export the repo, zip it, and mail it?
|
|
|
|
|
all email is scanned, I know that.
I have not tried to test their scanning abilities for zip files, etc. or encrypted emails.
may raise suspicions with security. not sure. don't want to find out.
|
|
|
|
|
Just encrypt & send a text file whose only contents is "Red Herring" or some juicy but untrue gossip about yourself..
|
|
|
|
|
Slacker007 wrote: My company has the laptop encrypted with Bitlocker and so if you store something on a USB device, it encrypts it, so that only the laptop can read it back again.
Any machine running BitLocker can unlock those USB drives. You just need to know the password or recovery key.
|
|
|
|
|
Not when you are trying to recover a system in front of a customer. Recovery keys are a joke lets, make it so long you have no chance of rembering it, thank for masking tape and a pen, so you can write on the blooming stick
|
|
|
|
|
good luck finding my bitlocker key. I don't even know where I put it. Its somewhere in my office. LOL. I have not seen it in years.
I have not needed to export anything to USB for work in over 6 years, I think.
I don't use USB anymore for my personal stuff. Haven't for years.
|
|
|
|
|
glennPattonContracting2 wrote: I can't use the mini-hub as the Work lappy will not see things plugged into the usb ports! We have the McAfee virus at work. Its primary faults are two-fold.
First, every time you plug a removable device it that isn't encrypted, it offers to do so. You can say no, but it's not the default choice. The encryption typically bricks the device.
The other is in insane. Any application that writes executable files is subject to their "Adaptive Threat Protection". This is a heuristic mechanism that locks the file being written and then scans it for malware. Unfortunately, if the original writing process closes the file and then re-opens it, it's now broken. Visual Studio's manifest embedding and Inno Setup get caught in this a lot. I've had stern words with our IT department over the whole thing, with less than pleasant results.
Software Zen: delete this;
|
|
|
|
|
McAfee?, I went in now it appears to be working apart from I log into the VPN, but I have to go in tomorrow to run some tests (if the hardware is ready..!). I've only had the weirdness with it (McAfee) not running the VPN software, being updated runs fine, McAfee won't run the VPN.
I thank I haven't had to Vis Studio yet...
|
|
|
|
|
If my situation with it gets any worse, I'm going to look at measures of my own. Fortunately I'm an administrator on my machine. One possibility is an access control list on some of the McAfee executables that prevents them from executing. Another is a separate Windows service that terminates the Adaptive Thread Protection processes whenever they run.
Software Zen: delete this;
|
|
|
|
|
I removed McAfee from my main computer and switched back to Windows Defender, when McAfee kept flagging the executable of an application I was developing as 'suspicious', and wouldn't let me run it until I identified the executable as 'safe' every time I updated it.
|
|
|
|
|
I had a case where I was compiling an Inno Setup install. McAfee locked the Setup.exe being created, terminate the Inno Setup process, and deleted all files that process had open, other than the process executables itself. Unfortunately it deleted the source code for the installer I'd been working on. I lost over an hour's work, since I had to start from the last version of the installer source in our source control.
I was peeved.
Software Zen: delete this;
|
|
|
|