logoalt Hacker News

GoToRO • today at 3:35 PM • 5 replies • view on HN

Usually it starts with a locked down laptop, then request after request, you get more rights, even admin on the laptop because otherwise you can't do anything as a software developer.


Replies

Tangurena2 • today at 5:40 PM

Our (state) agency uses separate computer accounts for regular use and admin use. The admin account has neither network nor email access in order to prevent using the admin account on a regular basis. With state government agencies continually attacked with ransomware, we aren't as bondage and discipline as banks (which I have done before) or DOE (which was very severely extremely locked down and I was not connected to classified stuffs).

I have not needed admin credentials for regular development purposes since VB6 (which I was using until 2013). VB6 and ActiveX dlls required read/write access to the registry all the time.

gadders • today at 3:58 PM

Most banks give you a crippled version of Admin rights via a 3rd party tool. If you need more than that, tough/you're doing it wrong.

MrMorden • today at 6:55 PM

Even if you do need admin for a developer laptop, that has no bearing on the PAW you use to authorize deployments and otherwise interact with production systems. Assuming your employer is even a quarter competent (i.e., not Binance).

cityofdelusion • today at 4:07 PM

Banks, at least in the U.S., are highly regulated and this would be very abnormal and subject to regulatory non-compliance, especially when the bank crosses into “big bank” territory. This stuff is regularly audited internally and externally.

sitkack • today at 4:11 PM

You can dev without admin.