ttttt444yeak

This is 100% the most effective way to do it for anybody interested in trying. It doesn't even take all that much practice. I got it on my second attempt.

I'd disagree slightly about how awake you want to get though. Obviously don't turn on any lights or stand up. But force yourself to be awake for enough time to get your bearings or you are going to lose consciousness too early.

They absolutely belong in prison, I just don't think it should stop with the C suite.

The lack of any kind of effective legal standards in the tech industry is batshit crazy considering the the primary business model and what they are investing in. Its an actual tragedy and by far the thing the scares me the most about living in the US.

This is the real reason. It's very simple. Not even programmers would program on a smartphone so of course non programmers also aren't going to do it.

This was very insightful, I hadn't thought of it this way before. Thank you for your comment.

How did things end up this way? I'm massively frustrated by the stupidity of our security team and it gets worse each year. And I've tried to explain this stuff about web apps exactly like you just did but it never quite gets through, and when it does it gets a response like "well, we should probably find a way to restrict web apps as well".

I know for a fact that none of the people doing systems administration that install this junk endpoint management software actually want to install it. And it's laughable that corporations can simultaneously claim to be implementing zero trust, while at the same time giving crowdstrike software more trust than anything ever had before everybody decided they wanted to chase buzzwords. It can take weeks for me to get a new hire set up with WSL right now. If I didn't like the people I work with I would have jumped ship a long time ago.

Security teams have managed to threaten and bully their way into having more power than anybody else in IT. All the big stories about hacking is certainly part of it, but honestly I don't think that fully explains it. If I was a CIO paying an enormous amount of money for endpoint management and then saw something like solar winds happen, I'd probably have fired everybody on the security team that advocated those sorts of security strategies.

In my mind, security is something that should happen deep in the backend and be handled mostly by programmers, DBAs, and the admins that handle application servers. Once the data has left those environments with somebody it shouldn't have you have already lost. No hacker has ever said "I breached the database, but then got stopped from exfiltrating data because somebody made it so the USB sticks don't work".