this post was submitted on 24 Aug 2026
384 points (99.5% liked)

memes

22461 readers
3777 users here now

Community rules

1. Be civilNo trolling, bigotry or other insulting / annoying behaviour

2. No politicsThis is non-politics community. For political memes please go to !politicalmemes@lemmy.world

3. No recent repostsCheck for reposts when posting a meme, you can only repost after 1 month

4. No botsNo bots without the express approval of the mods or the admins

5. No Spam/Ads/AI SlopNo advertisements or spam. This is an instance rule and the only way to live. We also consider AI slop to be spam in this community and is subject to removal.

A collection of some classic Lemmy memes for your enjoyment

Sister communities

founded 3 years ago
MODERATORS
 
you are viewing a single comment's thread
view the rest of the comments
[–] groet@feddit.org 11 points 1 day ago (5 children)

Cool, here is a VM without domain join and no access to internal resources. Feel free to use your admin permissions on there.

Seriously though: developers need admin access during prototyping unless you are a giant enterprise that already has CI\CD, dependency management, staging environment etc all set up and properly configured. For everything else, devs should have their contained sandboxes with admin permissions

[–] Shanmugha@lemmy.world 8 points 18 hours ago* (last edited 18 hours ago) (2 children)

*and all those environments come with admin teams (devops, sysops, call them whatever) actually good at what they do. Because I have a long list of things to vent about exactly because:

  • you're a dev, so fight us for access and permissions (edit: that I already have ssh access to prod servers and thus could wreak havok any moment if I wished to is completely ignored)
  • here's a botched something you asked. It is not configured/improperly configured - well, who da fuq cares. Let's have another kanban card for fixing this
[–] zqps@sh.itjust.works 6 points 17 hours ago (1 children)

Most of the damage is done with good intentions.

Recently one of our devs was caught running Chrome portable (because he wasn't given admin access), where he logged in to his personal google account and saved his company credentials, where they were promptly synced to his personal malware-infested home system and ended up in a paid dataset on the darknet. IT Security, InfoSec and Governance policies have to be written with this kind of employee behaviour in mind.

Incidentally him and his team had just complained loudly about MFA being required for our critical apps.

[–] Shanmugha@lemmy.world 1 points 8 hours ago

Well, that is bad all over. And also can be seen as an evidence towards "if someone requires access that does not look suspicious, give it to them": he wasn't given access, so he went another way and fucked up spectacularly. On the other hand, though:

  • if it is a company machine, then not having admin access can be expected
  • I would expect that "do not ever use personal accounts for work and vice versa" does not need reminding, but here we are
  • yeah, the rules should account for malicious behaviour, intended and not
load more comments (2 replies)