Google restricting internet access to some employees to reduce cyberattack risk
Google restricting internet access to some employees to reduce cyberattack risk
Some workers who need the internet to do their job will get exceptions, the company stated in materials.
The company will disable internet access on the select desktops, with the exception of internal web-based tools and Google -owned websites like Google Drive and Gmail. Some workers who need the internet to do their job will get exceptions, the company stated in materials.
In addition, some employees will have no root access, meaning they won’t be able to run administrative commands or do things like install software.
Permanently Deleted
That honestly just sounds like they're going after more government contracts. Gov't compliance can sometimes require asinine security controls because they expect the users are the weakest link in every design. That can sometimes be true, but when folks are developing things you sometimes have to let them make foot guns or they can't build things.
I mean, that is all really good?
If a machine does not need internet access, it should not have it. Airgaps/incredibly restrictive firewalls are pretty much the only true defense for attacks and social engineering.
As for developers: If you are making enough money to justify needing this level of security, then you can afford to buy everyone a second computer/laptop.
At my old gig this was exactly the development model. Sensitive material happens on the computer on on side of the office, non-sensitive development and communication happens on the other. Wheel between desks depending on my task.
Same with root. No developer needs root if you have a competent-ish IT department. At my current gig, we actually use a VDI setup where asking for software to be installed on my "workstation" is literally a pull request that an authorized staff member approves.
Shouldn't use admin account/machine for general browsing the web. Have one machine to browse and development and another to connect to anything you want to protect from risk of attack
Dev when he realizes he can't use stackoverflow: just leaves
Enshitifcation of a corporation is a thing too.