News for hackers. Stuff that matters.

A comment on OS X Command Line Utilities. Parent comment

Re:OS X Command Line Utilities by vinceguidry on Sunday August 30, 2015 @01:32PM (#10143939)
Security requires a threat model to rise above theatre. If there are operations threats to your organization, then you need opsec to mitigate those threats. Is China or someone else trying to steal your trade secrets?

If so, I would hope the responsibility for setting opsec policy isn't resting in one sysadmin.

[ Parent | on HN ]
Re:OS X Command Line Utilities by Angostura on Sunday August 30, 2015 @03:50PM (#10144297)
> Is China or someone else trying to steal your trade secrets?

Or more prosaically, do you have any semi-confidential e-mail on your machine, that a coworker might fancy reading?

[ Parent | on HN ]
Re:OS X Command Line Utilities by vinceguidry on Sunday August 30, 2015 @05:11PM (#10144490)
If you can't trust your coworkers not to go snooping on your machine while you're not there, then you should find a better job. Threat models balloon in complexity when you can't use tools like zones of trust and choke points.
[ Parent | on HN ]
Re:OS X Command Line Utilities by aclissold on Sunday August 30, 2015 @05:57PM (#10144611)
I'd argue that the coworkers that are the most dangerous are the ones you do trust. :)
[ Parent | on HN ]