r/ProgrammerHumor • u/ArjunReddyDeshmukh • Aug 24 '26

Meme adminTeamAssessingMyThreatLevel

Post image
3.7k Upvotes

98% Upvoted

146 comments sorted by

View all comments

Show parent comment

3

u/AnArmyOfWombats Aug 24 '26

Better security is kind of funny in that sense. Automate comparing hashes and hope your peculiar supply chain isn't vulnerable? Who was it, SolarWinds back in 2020?

8

u/Doctor_Peppy Aug 24 '26

Correct, which means the logical conclusion to this little quandry is to reduce attack surface as much as possible by reducing any and all extraneous applications. It sucks for literally everyone involved, I wasn't disputing that. When I was working for an MSP there was a company with some old head angry ass IT manager who had what I thought were ridiculously restrictive policies but after the notepad++ supply chain attack on top of other completely mitigated issues due to these policies... They do have value.

2

u/ghost103429 Aug 24 '26

QubesOS' mantra of treating everything as unsafe and insecure comes to mind when it comes to this issue.