• 1 Post
  • 23 Comments
Joined 2 years ago
cake
Cake day: June 14th, 2023

help-circle
  • Fuck yes. I switched to Linux after Windows got all control freaky over my task bar. On Linux I can have 30 task bars if I want, 100 task bars. I can setup a mouse-task bar that opens radially around my cursor. On mac I can put that shit left, right, bottom, which is something, and i can resize it which is the bare fucking minimum.

    On Windows? Bottom. Full width. Don’t like it? Fuck you. Shut up and cope.

    Oh but there’s a registry hack to… nope. Not dealing with that shit again after I tried to make the fucking icons smaller AND IT BROKE THE TASK BAR.

    Love that proprietary feeling, those crisp millions of dollars of development being used to innovate and develop a robust and perfected operating system.


  • Many can’t upgrade to 11 and don’t want to buy a new device. They’ll believe it’s their only option unless told otherwise. It’s not necessarily a “Win11 is bad” or “Linux/BSD is better” scenario, just a “to keep using your current device which you paid for less than a decade ago, do the following”.

    Times are hard and people shouldn’t be forced to buy new hardware because of the current monopolistic software companies’s latest money making scheme, especially when their old one works perfectly fine and the environment is going to suffer.


  • I’m sorry your team is like that, they should do better. I get along with my company IT team, obviously working close with them has benefits, but we have a lot of oversight and executive support so giving two word answers isn’t a thing where I work, they have to give a written justification etc.

    In the same sense that not everyone works where I do, not everyone has assholes in IT who deny everything. Neither of our experiences are default and I was trying to write for someone in-between. Apologies if it didn’t come across that way.

    There are businesses who don’t allow spotify on the corporate device, for sure. I saw a talk delivered by a guy who did. He worked for a mining company, they wouldn’t let people install things and were inundated with policy violations. He had to change the entire company culture around who IT were, and started by letting people make install requests for apps they wanted to use. They just tracked the requests so they knew who had what, and by helping, they could be selective about where the software came from.

    When people don’t have IT as a support and see them as a regulator, they don’t work with them and bad shit happens. This dudes mining company was hit, also with ransomware (this one worked), because the CFO had local admin since he didn’t want to talk to IT.

    My point is

    • a. they should be helping in this instance. Sorry they don’t, that’s frustrating to hear. Work culture is hard to change and I’m lucky with where I do work and the culture we have.

    • b. don’t bypass security controls regardless. Sorry. It’s still not the answer. If work makes you do things a slower or more annoying way, that’s their time lost. HR will throw you under the bus for the policy violation.


  • JoshCodes@programming.devtoLinux@lemmy.mlLibreOffice is pretty damn good
    link
    fedilink
    English
    arrow-up
    2
    arrow-down
    1
    ·
    edit-2
    2 months ago

    That may be true for Discord but for FOSS products the security concern is the attack surface (more to patch).

    Like I said to the other commenter, if they say no they should have to justify that (in written form, argued, with points), even if the reason you want it is familiarity with the tool, workflow speed ups, or it has a nicer UI. Make them work harder if they say no, and make it really clear you will go away quietly if they say yes.

    I do think that companies asking users to use standard tools so they can build processes and training materials is reasonable. Using other tools means more attack surface, it means more updates, more documentation, less familiar people and it means more risk.

    Also assuming your company is like most and forgets to document everything alongside the crucial processes, if you know how to do something and tie it to a FOSS product instead of say excel, they won’t be able to hire a grad that can work for cheaper and do the thing half as well.

    My point is it does do something for them, but not as much as they think. They didn’t pay for the office suit for you to not use it. However, if you don’t need it, they can also stop paying for it. Justification is important. So is making ITs life difficult by making them justify decisions.

    Bypassing them makes the incident response team’s life difficult, not ITs.


  • Okay maybe I should have said they can’t say no and appear reasonable? Was there a justification or is this guy Joseph Goebbels or something? I bet you didn’t use AI 2 years ago but probably have that running rampant.

    I’d love to live in a world where I trust everyone to install software on computers, but Mr Ransomware, albeit not common, is out there waiting to fuck up the business with a portable application he found. He wanted to do something for a colleague, but we all nearly suffered for it.

    Install things the right way, and if you can’t, make a case for it and get managers involved. Justify the time saved or the comfort it provides: everyone hates AI, blame it on copilot being in excel.

    Bypassing security instead of working with them doesn’t help anyone and it almost always ends badly.


  • There was a trend of malware authors making websites to give away free video editors, I think this one appeared as capcut. They patch the binaries or use other techniques and include malicious DLLs.

    Edit: you and I both are fine with people installing FOSS from github, but what happens when they get the name for the repo wrong? What happens when they go to the fake site a malware author spun up, that even has all the files they wanted?

    Security is there for a reason, sorry, I know we can be annoying and add hurdles to important roles, but people get things wrong. We help with that, and bypassing us means you didn’t give us a chance to save you before you messed up (again I assume everyone on lemmy is a sysadmin Linux user so not ‘you’ but a generic user you).


  • JoshCodes@programming.devtoLinux@lemmy.mlLibreOffice is pretty damn good
    link
    fedilink
    English
    arrow-up
    21
    arrow-down
    1
    ·
    2 months ago

    On behalf of cyber and IT, just ask IT to install the thing, please. They can’t really say no to a free app and bypassing restrictions ends badly for everyone. I had a user do that with video editing software… seriously, what could go wrong? Ransomware. Literally ransomware. Lucky for antivirus it stopped it but yeah, please work with IT.






  • Most hacks interact with Linux because its in almost every corporate environment. People can still get scammed on Linux on their personal device too since rdp clients are compatible and a common method used. Linux Desktop is 4% market share (according to steam surveys?) but server infrastructure is largely Linux based, from firewalls to Web servers to database infrastructure. Most people host some form of Linux environment and lots of ransomware actors have Linux specific encryptors.

    Think of it this way: if the environment you just hacked has their corporate SQL database with all of their trade secrets sitting on Linux infra, and you’re a ransomware actor, you’re not going to give up and go hack someone else. Well, not if you’re any good I guess.

    The Linux community is better at finding and detecting this stuff due to more people looking at it and open source making it available etc. It’s attack surface (software that could be attacked) is still huge and the danger comes from outdated versions and misconfigurations just like anything else.

    Patch often, install from trusted sources, have backups. That’s really all you can do. Every environment has vulnerabilities. They sit at desks and push keys on the keyboard.


  • Yeah look that was the front page of the repo talking about how it has C/C++ and Fortran code, sorry for not reading the docs and finding out that yes they still use C/C++ and Fortran code in the form of OpenBLAS which is a dependency… f2py is just a method of doing the following:

    F2PY facilitates creating/building native Python C/API extension modules that make it possible

    • to call Fortran 77/90/95 external subroutines and >Fortran 90/95 module subroutines as well as C functions;

    • to access Fortran 77 COMMON blocks and Fortran 90/95 module data, including allocatable arrays

    from Python.

    Correct me if I’m wrong here but if you’re implementing an api for one programming language to talk to another then that means you have 2 programm-

    I wake up as a lizard. The meaning of kernels, subroutines and programming languages is already fading. I realise the rock I am lying on is slightly in a shadow and move into the sun. Might eat a bug later…