News for hackers. Stuff that matters.

A comment on Ask HN: My client want an agent on my laptop. Is this the new normal?. Parent comment

Re:Ask HN: My client want an agent on my laptop. Is this the... by joekrill on Friday December 17, 2021 @09:02AM (#29592230)
The underlying problem is they are asking you to trust Drata implicitly, sight-unseen, and give them unfettered access to their laptop. There is nothing preventing Drata from changing their minds and altering how their agent works or what it collects.

Then there's the unintentional aspect. There is, of course, no guarantee their agent is bug-free. Data leaks and compromises happen all the time, by every facet of company (large, small, respected, hated, etc).

This is really a huge risk IMO. If anything, it's being downplayed and far from "nonsense".

[ Parent | on HN ]
Re:Ask HN: My client want an agent on my laptop. Is this the... by lucraft on Friday December 17, 2021 @09:29AM (#29592605)
Grown-up companies doing SOC2 usually provide developers with hardware, and in that case the company is installing an agent from a vendor they have selected, onto their own computers.

True, the grey area is slightly odd situations like this where the protagonist is a freelancer rather than an employee and presumably also the company isn't willing to provide hardware to them in that case?? Because they're a freelancer?

Sounds like a case that isn't going to survive too long in any company that's getting serious about compliance and risks.

[ Parent | on HN ]