as a candidate it's pretty tough scheduling interviews past 5pm or on the weekends

Found the optimist

It does boggle my mind as well. I’ve only ever worked in high security industries as a developer, and I’ve never had admin access unless I was on hardware deployment. Limited user accounts, Firewall blocks, Active Directory audits, and full file system and network log audits are the name of the game where I have been. Anything external gets flagged quickly by automation and anything severe gets an immediate phone call. Falling for a pen tester phishing more than once, getting your laptop stolen, and so on can get you on the poor performer list. It just seems obvious for critical domains.

Usually it starts with a locked down laptop, then request after request, you get more rights, even admin on the laptop because otherwise you can't do anything as a software developer.

ah but that is boring, disruptive and too sysadminny. Its like the 90s. Cool companies have macbooks with full local admin. Devs need full access.

Cryptocurrency is like finding out why financial regulations exist speedrun

> I think Binance needs to start having IT Security like a bank as well.

I don't disagree but note that apparently a bank in France, Credit Mutuel (and it's Fortuneo online arm), just got robbed of hundreds of millions of EUR: hackers who have beforehand created accounts on Kraken (a cryptocurrencies exchange) and who then wired millions to different accounts, bought cryptocurrencies, and withdraw the crypto.

But the hack was really stealing hundreds of millions from the bank.

So not even banks are safe now.

Around 2005, my employer at the time did a refresh of our it equipment, replacing all the cheap stuff we had been acquired with. They asked everyone to say if they need a laptop, as desktops were the default at the time. I said I didn't, and was surprised when he turned out that almost everyone else said they did. Most of them didn't really need one, and presumably were planning to use them for personal stuff.

The company was a bit salty about this as laptops are more expensive, but they got them. And of course the company befitted, as that was the end of a clear separation between work and home. You have your laptop, you can answer email and attend meetings with people in other time zones. Before, it was easy; work stuff stayed on work computers and those didn't leave the office when you went home.

Not much around here, while it is tolerated for accessing something over the Web, the cyber security trainings explicitly mention being a possible way for job termination when something goes wrong, after installing anything not cleared by IT.

May be the opposite, but BYOD is a thing and has the same result, security-wise…

>Ohh, my kids make music.

It is one thing to do personal things on a work laptop, it is another all together to give your children free reign. Are there no penal measures taken to deter this anymore?

> A lot of people just think laptop == laptop.

We are talking about highly educated people who work in software development (i.e. can assumed to have some minimum viable knowledge about computers), and not about the dumbest imaginable users.

I've worked for a couple companies whose stance on me having a linux work laptop was "fine, but you have to support yourself".

So despite it being a "company" computer I personally installed the blank SSD and installed Arch on it and did not install any company spyware.

I was perfectly comfortable also having Steam installed so I could entertain myself on the plane on business trips. I knew everything installed and spyware wasn't on the list.

When I work at companies that have MDM set up on my computer, I don't do that.

At least dual-boot a second OS that they have no control over.