isatsam

This is a surprising response - I was expecting something like "they clicked past an alert notifying that they were giving us this level of access". Just because Windows only has a generic password prompt whenever an app wants to do something dangerous, doesn't mean you can't inform the user via your app's own UI. Others like AnyDesk do exactly that.

How was an individual user (in this article's case, a phishing sites developer) able to install your software and seemingly not notice the level of access they gave you to their computer?

This makes sense, but in this case, isn't the company behind Huntress having direct access to this data still a problem? For example, if the government purchased Outlook licenses, I'd assume DoD can read clerks' emails, but Microsoft employees can't. I imagine worst case compromising a lot of Huntress' users is just a question of compromising of its developers, like one of the people in the authors section of this article.

I don't work in cybersecurity and, after looking at the site's homepage, couldn't exactly figure out from all the buzzwords what exactly is this product. The most concerning takeaway from this article for me is that the maintainers of Huntress (whatever it is) can keep a log of, as well as personally access, the users' browser history, history of launched executables, device's hostname, and presumably a lot of other information. How is this product not a total security nightmare?

Location: Dublin, Ireland

Remote: Yes

Willing to relocate: Within Republic of Ireland

Technologies: Python - backend services (Django, Flask), desktop applications (PyQT), data science; React.js, TypeScript, JavaScript, HTML/CSS - frontend; less so - Golang for web development, C#/.NET, C, Bash; very comfortable with Linux, Nginx, Docker.

Résumé/CV: https://isatsam.dev/cv.html

Email: [email protected]

Hi there, I'm a software developer with 2 years of experience looking for a junior or staff position. I'm passionate about web technologies, Linux systems, automation, and clean code. I'm a self-taught dev interested in working on impactful projects and solutions for ambiguous problems. I have experience working independently as well communicating with both other engineers and end-users of projects I was involved with. Looking for sponsorship for Critical Skills Residence Permit (Ireland).

Unpaywalled, for anyone looking: https://archive.is/dNkQY

Snapshot of the article without paywall: https://archive.is/iBOmQ