Re:Ask HN: My client want an agent on my laptop. Is this the...
by neonnomad on Friday December 17, 2021 @12:35PM
(#29595415)
The agent is read-only and has no capability to wipe a device, it is a read-only agent that we have security validated with a third party. You can see my other responses in the thread around what it collects but it is just system information to ensure the device is meeting the appropriate security/compliance controls for the company to meet its compliance obligations.
Source: I am the Drata CISO
Re:Ask HN: My client want an agent on my laptop. Is this the...
by illud_tempus on Saturday December 18, 2021 @04:34AM
(#29603158)
> The agent is read-only and has no capability to wipe a device, it is a read-only agent that we have security validated with a third party.
And you can change that over night, without notice to anyone not actively monitoring your platform for such messages.
Why is that your policy.
You expect a high level of trust. And still you engage in dark anti-patterns that nukes any kind of trust for anyone who know how to read.
Big firms when they issue their own hardware often install such agents that have ability to not just monitor activity, but also wipe out data or change user account credentials.
I personally find it weird if the ask is to install such agent on BYOD (personal device), since not just the company data, but your personal data can also be wiped out remotely, or your account credentials can be changed remotely locking you out of your own device.