News for hackers. Stuff that matters.
Re:LastPass says DevOps engineer’s hacked computer led to se... by alexwasserman on Tuesday February 28, 2023 @01:05AM (#34966213)
Give you a MacBook and a cloud Linux dev machine (or as many as you want).

Secure access to dev environment with multiple easy factors - MBP biometrics, yubikey, etc

Enforce strong password and FDE on the laptop.

Obviously doesn’t need to be a MacBook, but you stated an aversion to overly locked down windows laptops.

In general, just enforce strong multifactor creds when accessing internal resources.

You can also enforce device very requirements, so a stole device or yubi can’t be used either.

Then do what you want on your Linux instances in the cloud. They’re protected with their own controls.

There are no comments on this comment yet.