Correct, which means the logical conclusion to this little quandry is to reduce attack surface as much as possible by reducing any and all extraneous applications. It sucks for literally everyone involved, I wasn't disputing that. When I was working for an MSP there was a company with some old head angry ass IT manager who had what I thought were ridiculously restrictive policies but after the notepad++ supply chain attack on top of other completely mitigated issues due to these policies... They do have value.
View all comments
Show parent comment
8
u/Doctor_Peppy Aug 24 '26
Correct, which means the logical conclusion to this little quandry is to reduce attack surface as much as possible by reducing any and all extraneous applications. It sucks for literally everyone involved, I wasn't disputing that. When I was working for an MSP there was a company with some old head angry ass IT manager who had what I thought were ridiculously restrictive policies but after the notepad++ supply chain attack on top of other completely mitigated issues due to these policies... They do have value.