News for hackers. Stuff that matters.
Re:European Commission fines Google €4.34B in Android antitr... by lloydde on Wednesday July 18, 2018 @12:02PM (#17559568)
What Chrome also did far better than everyone else was a user local install, ie an install that didn’t require admin on the PC. Shadow IT installs was a huge advantage over Firefox in Chrome’s first years.
Re:European Commission fines Google €4.34B in Android antitr... by ocdtrekkie on Wednesday July 18, 2018 @12:16PM (#17559662)
I still have to fight this occasionally. :| In one instance, I ended up just telling the antivirus software at a company to flag Chrome as a virus and block it from executing. Software installation requiring admin rights is by design, and circumventing it is unethical as heck.
Re:European Commission fines Google €4.34B in Android antitr... by praseodym on Wednesday July 18, 2018 @12:47PM (#17559948)
If you rely on the lack of admin rights to prevent unauthorised software from being run you’re doing it wrong. You should be using whitelisting (e.g. AppLocker in Windows) which also prevents “portable” applications (without an installer) from being used.
Re:European Commission fines Google €4.34B in Android antitr... by ocdtrekkie on Wednesday July 18, 2018 @02:34PM (#17560931)
I don't disagree, but a significant majority of IT environments are "done wrong".
Re:European Commission fines Google €4.34B in Android antitr... by TeMPOraL on Wednesday July 18, 2018 @05:36PM (#17562282)
The eternal conflict between lowly workers trying to get their job done and the IT department trying to prevent them from doing their jobs to make their own life easier, based on the notion that if users can't use the infrastructure, they can't break it.
Re:European Commission fines Google €4.34B in Android antitr... by ocdtrekkie on Wednesday July 18, 2018 @06:47PM (#17562647)
Obviously, Chrome is not needed to do their jobs. If it was, it'd be provided. Browsers, especially Chrome, are a massive malware ingress point, it makes zero sense for end users to install them.

IT actually exists to help ensure people can do their job, and do their job faster. As a general goal, I like to learn about people's business processes for the exact purpose of seeing how our IT environment can be improved to expedite their work.

And having five browsers on a PC doesn't make it easier for end users. I have no problem dealing with five browsers, but I get a lot of complaints from people when they open link A in browser B and link C in browser D and don't understand why things don't work.

You may have experienced poor IT departments in the past, or thought you experienced poor IT departments because you didn't understand the other considerations in play, but that's hardly an excuse to assume any given IT choice is some sort of attempt to prevent employees from doing their jobs.

Re:European Commission fines Google €4.34B in Android antitr... by TeMPOraL on Wednesday July 18, 2018 @11:58PM (#17563853)
> If it was, it'd be provided.

That's a faulty assumption right there. Usually, people providing workers with their computers and software have limited idea what those workers actually need to work efficiently. This works out fine when workflows are defined so well a trained monkey could do the job, and fails miserably when the worker needs any sort of creative control over their workflow or work output (programmers, designers, all sorts of engineers and technicians, etc.). Most corporate work is probably closer to monkey level than to creative level, but enterprises love to do company-wide policy changes, making all work conform to lowest common denominator.

> You may have experienced poor IT departments in the past, or thought you experienced poor IT departments because you didn't understand the other considerations in play, but that's hardly an excuse to assume any given IT choice is some sort of attempt to prevent employees from doing their jobs.

I've experienced one competent IT department in my life, and their best quality was helping shield our programming team from policies like application whitelisting or limiting admin access, that they were forced to deploy company-wide. For other IT departments I dealt with, most of their actions were explainable if viewed through the lens of caring about the infrastructure to the extreme - that is, "if no one uses it, no one will break it" approach.

Re:European Commission fines Google €4.34B in Android antitr... by ocdtrekkie on Thursday July 19, 2018 @05:00PM (#17570211)
> That's a faulty assumption right there. Usually,...

You accuse me of making a "faulty assumption" about my own environment, and then proceed to assume that you can speak for most/all IT environments.

When I state "if you need Chrome, we'll provide Chrome", that's true of my environment. It's also true of my environment, if we don't provide Chrome, and you find a way to install it yourself, you'd be violating policy, and barring the casual mistake of not knowing that, potentially referred to HR. Obviously, in the ideal "don't need to involve HR" case, we just make sure you can't install it.

Now, what isn't just true of my environment, but true of all environments, is that users installing random web browsers is incredibly dangerous, and something every IT department should be preventing if they own the hardware. I don't think that's even a controversial statement, I'm confused why it's being treated like one.

Re:European Commission fines Google €4.34B in Android antitr... by mr_toad on Wednesday July 18, 2018 @10:52PM (#17563636)
Installation requirements are mostly a hangover from the days when Windows PCs weren’t locked down and anyone could write to the system folders and admin rights were just assumed.

Software developers often didn’t bother testing or ensuring that their software would install (or even run properly) without admin rights.

Re:European Commission fines Google €4.34B in Android antitr... by paulie_a on Wednesday July 18, 2018 @02:05PM (#17560677)
If you try that on my box, your admin rights will be removed. Preventing me from installing necessary software to do my job is unethical.
Re:European Commission fines Google €4.34B in Android antitr... by ocdtrekkie on Wednesday July 18, 2018 @02:35PM (#17560943)
Users who have a valid necessity for Chrome can have it, in a very controlled fashion (extensions and cloud features disabled) on request and review.
Re:European Commission fines Google €4.34B in Android antitr... by paulie_a on Wednesday July 18, 2018 @02:43PM (#17561003)
Im ignoring that request and review process. I don't need a beaucratic process. Im just going to do it.
Re:European Commission fines Google €4.34B in Android antitr... by s73v3r_ on Wednesday July 18, 2018 @08:10PM (#17563089)
That's not your box, though. It's your employers.
Re:European Commission fines Google €4.34B in Android antitr... by paulie_a on Wednesday July 18, 2018 @10:36PM (#17563589)
Not necessarily. Byod is commom. And quite frankly even if it is my employers box im not gonna put up with restrictions against installing a web browser. Or deal with some paperwork request, I'll work around it and just do it.
Re:European Commission fines Google €4.34B in Android antitr... by lovich on Wednesday July 18, 2018 @10:59PM (#17563665)
Who would bring their own equipment to work in software unless they are a founder? That's like paying to work. Especially when employers like to claim ownership rights to all data generated by their employees in the course of business.

Mechanics bring their own tools frequently but their employers don't try to repo their personal vehicles just because the mechanic used the same tools at home and at work

Re:European Commission fines Google €4.34B in Android antitr... by paulie_a on Thursday July 19, 2018 @09:12AM (#17565883)
It's fairly common to byod. Just think about personal phones. Do you have corporate phone or do have slack installed on your personal one?
Re:European Commission fines Google €4.34B in Android antitr... by lovich on Thursday July 19, 2018 @12:34PM (#17567945)
I don't have work slack on my personal phone on principle. If the company wants to require me to be available on their systems they need to provide the hardware
Re:European Commission fines Google €4.34B in Android antitr... by arcbyte on Thursday July 19, 2018 @11:57AM (#17567500)
My company hands us out shit laptops running 10 different layers of security devices. Fuck that. I bring my Surface Pro in and actually enjoy my life.
Re:European Commission fines Google €4.34B in Android antitr... by ocdtrekkie on Thursday July 19, 2018 @05:07PM (#17570274)
Are you running your personal hardware (without the security) on the internal network? Please tell me you don't have the same level of access with personal hardware as you do with the corporate equipment.

Even in a BYOD environment, an organization should be ensuring any devices granted access to resources are appropriately patched and secured.

Re:European Commission fines Google €4.34B in Android antitr... by s73v3r_ on Thursday July 19, 2018 @12:38PM (#17567998)
I can understand that. I just don't want to have a reason why my employer could call me in off hours, nor for them to claim ownership of stuff I've done.
Re:European Commission fines Google €4.34B in Android antitr... by s73v3r_ on Thursday July 19, 2018 @12:37PM (#17567975)
But then you're the unethical one, here.