News for hackers. Stuff that matters.
Re:80% of orgs that paid the ransom were hit again by bluGill on Friday June 18, 2021 @10:26PM (#27557215)
If a developer needs to be admin to do their work the os needs a better security model.
Re:80% of orgs that paid the ransom were hit again by 0x0203 on Saturday June 19, 2021 @12:43AM (#27557822)
That's highly dependent on the type of development work. I'm a kernel developer and I need regular access to privileged components of the system for a wide variety of reasons. It could be argued that all standard *nix/windows/mac systems need a better security model to better isolate specific tasks, but for much of what I need to do (e.g., create, modify file systems/boot loaders/kernels, ptrace processes, etc...), if I'm allowed to do it at all, I can get anywhere else anyway, so I may as well just have full admin and save everyone some headaches.

And I'd argue this isn't only true for kernel development. In some cases, sure, but certainly not enough to make such a blanket statement.

Re:80% of orgs that paid the ransom were hit again by bluGill on Sunday June 20, 2021 @07:35AM (#27569113)
You shouldn't be doing your kernel development testing on the same machine as you do your office tasks.

Though I will agree there are exceptions, you are not one