News for hackers. Stuff that matters.
Re:NHS gets £40M to cut login times on its IT systems by mrweasel on Sunday January 05, 2020 @10:35AM (#21961661)
With the SunRays you’d login to everything, pull your card and your session and applications would still be running on the Solaris server in basement. Put the card back in and your session and applications would be right back to where you were. So unless applications automatically log you out after some time, there would be no reason to log in again.

Sure you’d still not have SSO, but you could just let everything running, logged in, in your session on the server.

Re:NHS gets £40M to cut login times on its IT systems by lima on Sunday January 05, 2020 @11:28AM (#21961983)
That's how a modern Windows Terminal Server/Citrix/whatever infrastructure works, smartcards and all.
Re:NHS gets £40M to cut login times on its IT systems by toyg on Sunday January 05, 2020 @11:55AM (#21962174)
* Nobody uses windows terminal server for anything serious, because of its reputation for security holes (which may or may not be outdated, but y'know, "java is slow" etc etc).

* Nobody likes Citrix, even (or particularly) when they use it every day. The amount of compromises and hoops that app developers have to consider to deploy on it, is significant.

Re:NHS gets £40M to cut login times on its IT systems by lima on Monday January 06, 2020 @09:31AM (#21969335)
> Nobody uses windows terminal server for anything serious, because of its reputation for security holes (which may or may not be outdated, but y'know, "java is slow" etc etc).

Entire companies run on remote desktop. It's the industry standard, at least here in Germany. I'm working with a lot of enterprise customers and I never heard about particular security concerns with RDP. If anything, the protocol has an excellent security track record.

Re:NHS gets £40M to cut login times on its IT systems by mrweasel on Sunday January 05, 2020 @11:51AM (#21962143)
Cool, I did not know that.

Why any organisation would choose to deploy regular desktops if this option exists, and why wouldn’t someone like the NHS not already be using this?

Re:NHS gets £40M to cut login times on its IT systems by DanBC on Sunday January 05, 2020 @12:55PM (#21962684)
> and why wouldn’t someone like the NHS not already be using this?

We all say "The NHS", but it's made up of a bunch of different companies.

https://www.nhsconfed.org/resources/key-statistics-on-the-nh...

    135 acute non-specialist trusts (including 84 foundation trusts)
    17 acute specialist trusts (including 16 foundation trusts)
    54 mental health trusts (including 42 foundation trusts) 
    35 community providers (11 NHS trusts, 6 foundation trusts, 17 social enterprises and 1 limited company)
    10 ambulance trusts (including 5 foundation trusts)11
    7,454 GP practices12
    853 for-profit and not-for-profit independent sector organisations, providing care to NHS patients from 7,331 locations13
Re:NHS gets £40M to cut login times on its IT systems by ocdtrekkie on Sunday January 05, 2020 @11:58AM (#21962189)
Virtual desktops are a whole different ball of horror. Sometimes giving everyone a plain old PC is a ton cheaper than figuring out how to troubleshoot the super expensive nightmare server that has to handle the load of replacing everyone's PCs.
Re:NHS gets £40M to cut login times on its IT systems by toyg on Sunday January 05, 2020 @11:56AM (#21962182)
Because Citrix is horrible and expensive, and TS is (thougth to be) too weak (and again expensive).