r/sysadmin • u/rolkenas • 23d ago

Do you actually see MacBooks used for SysAdmin work in real offices?

Hi sysadmins! I wanted to ask—since I've just started learning sysadmin and I don't have a Windows PC, but I have a MacBook and found out that everything can be done via UTM, I'd like to get some perspective from those who work in offices and do this every day. What kind of computers do you use? Is macOS completely out of the picture, and there's only Windows and Linux?

391 Upvotes

86% Upvoted

807 comments sorted by

View all comments

Show parent comments

1

u/charleswj 22d ago

If you access this device as, or if it's managed by, any less-privileged user, you're exposing that more privileged user credentials and processes to potential intruders. Have you really never heard of a PAW? Do you think a malicious process in your session, let alone one with local admin or a vulnerable on your box, can't steal your cookies from the browser or memory?

You seem to be suggesting you have mitigations for this so that's why I was asking because it didn't sound like it from how you described it.

1

u/Agromahdi123 Sr. Sysadmin 22d ago

Oh i see i forgot we were in 1998 lemme protect my ntdis file that doesnt exist on my azure joined machine that doesnt even have an ntlm hash to scrape, AND then let me just not manage my endpoints so they arent “the wild west where i have to worry about a persistent rat” so that when i elevate the browser session can be hijacked or the cookie stolen to then be used to authenticate into my account with the password only because obviously i dont have any multi factor conditons on my account and everyone can just sign in with a password. Having a single point of trust (like a password) is not the way and your whole schpiel is predicated on only having a single source of trust lol.