Re:80% of orgs that paid the ransom were hit again
by 0x0203 on Saturday June 19, 2021 @12:43AM
(#27557822)
That's highly dependent on the type of development work. I'm a kernel developer and I need regular access to privileged components of the system for a wide variety of reasons. It could be argued that all standard *nix/windows/mac systems need a better security model to better isolate specific tasks, but for much of what I need to do (e.g., create, modify file systems/boot loaders/kernels, ptrace processes, etc...), if I'm allowed to do it at all, I can get anywhere else anyway, so I may as well just have full admin and save everyone some headaches.
And I'd argue this isn't only true for kernel development. In some cases, sure, but certainly not enough to make such a blanket statement.
And I'd argue this isn't only true for kernel development. In some cases, sure, but certainly not enough to make such a blanket statement.