Hacker News Reader

Comment by drusepth | Hacker News Reader

There's a surprisingly large number of groups of people that use Google Drive, Dropbox, and similar for "source control" and/or collaboration on projects instead of real VCS.

View on HN

I have worked with colleagues who expect to be able to keep their current work in Dropbox/GoogleDrive, so they don’t need to take their work laptop home every day but still have easy access to their current work from home.

“Hey, why can’t I get Dropbox to work on this laptop? I need it so can do emergency bug fixes from my personal laptop at home!” “Yeah, nah. Remember that security policy you signed as part of your employment contract? The one that says exfiltrating company or client data or code to non corporate systems is a fireable offence?”

Google Drive many-times IS the enterprise approved cloud storage/sharing solution.

Writing the files to your home hdd, even using the approved solution, is exflitration of data.

I want to say that the sort of place that had GDrive as their "approved cloud solution" is unlikely to also be the sort of place that has the sort of data the required firing-offence rules for exfiltration to non company systems, but I know that's not the world we actually live in...

I'm reminded that Lastpass got popped via an employee running a well out of date version of Plex with known RCE exploits and getting a keylogger installed:

“This was accomplished by targeting the DevOps engineer’s home computer and exploiting a vulnerable third-party media software package, which enabled remote code execution capability and allowed the threat actor to implant keylogger malware,” LastPass officials wrote. “The threat actor was able to capture the employee’s master password as it was entered, after the employee authenticated with MFA, and gain access to the DevOps engineer’s LastPass corporate vault.”

The hacked DevOps engineer was one of only four LastPass employees with access to the corporate vault.

I mean, I know exactly why. But why the fuck was the corporate Lasspass vault available to a staff member's home machine running Plex? Is the expense of a corporate vpn-locked laptop and a pair of Yubi keys too much for a fucking _Password Vault_ senior developer??? "Should we spend a couple of grand buying a work laptop for this guy who literally has the keys to our kingdom? Or do we save a few bucks and get him to work on the machine he already owns, the same one he runs outdated media server software and probably bittorrents all his porn with? What could possibly go wrong?"

I don't do that, but I was once bitten by iCloud. I always put my code in ~/code and copy it over when I get a new machine. I once had the idea to just put it in ~/Documents/code, thinking it'd be automatically synced. Turns out that iCloud doesn't sync dotfiles.

https://stackoverflow.com/questions/35853139/can-git-and-icl...

I use Git for version control but for some of my personal projects I also have a copy in Dropbox, so I can make changes on my laptop downstairs, not be ready to commit it, save it, go upstairs, and continue work from my desktop pretty much seamlessly.

Some of my projects aren't set up this way, and it can get annoying to have made a few small changes and be forced to commit them in order to pull them from upstairs.

That seems really illadvised.

everyone is differently abled.

Cynical view, a lot about npm seems really ill advised. One additional bad decision after that choice seems easy enough to go along with… ;-)

A lot of it is. And yet, it works so well it conquered the world.

So did Mc Donald’s and Starbucks.

I’m not entirely happy with the idea of living in a world conquered by the lowest common denominator solutions.

Speak for yourself, I find it great. Much better than the alternatives like pip or nuget. And the ecosystem has endless amount of solutions ready.

And I love big macs, but they may not actually be a good thing.

In this case it is a good thing. And as I said, still much better than the alternatives.

What do you think npm does better than pip?

McDonalds is my favorite answer to the popularity argument. Popularity is a data point to factor, but it's only one and it's meaning and value are entirely context dependant. Basically means nothing by itself.

If we somehow changed the rules so that Mc Donald and Starbucks were illegal, we would not end up with local artisinal coffeeshops on every corner, we would likely have a lot fewer places to get good coffee.

True, it's certainly not that intuitive

Get over yourself. McDonald's is far from "lowest common denominator." Go travel the world a bit and see how real people live and what they actually eat every day.

We had a drive thru grass fed burger place open up across the street from McDonald’s and it was gross. It lasted maybe a year. McDonald’s makes pretty good burgers, not what I want every day for sure but in a pinch they aren’t bad.

Reply on news.ycombinator.com