Programmer Humor

Wouldn't it be enough to just create a seperate subnet?

Which actual IT guy supports antivirus?

what a dick move tbh. i get ya wanna be secure, but why not just let him do his thing on that alternate network?

This is just Uncle BOFH.

wth is the point of a guest network if you have 443 blocked lmao.

Even my VPN port is 443 so it gets past basic port filtering because HTTPS is usually the only one allowed compared to other protocols.

I feel like when 'Zero Trust' first became a thing, the theme was 'you should have every endpoint under your control hardened so it need not feer untrusted peers being able to connect'. E.g. if you think you absolutely need VPN to a 'private network' for security, then you are failing to be hardened in a 'zero trust' way, because you implicitly fear that your systems would fall to untrusted peers.

I feel like it's evolved to 'don't let anything be able to connect to anything under your control unless you have admin privilege over it as well'. Which is particularly a nightmare when you try to collaborate between two companies, each balking at the other's hard requirement to have admin access to all network peers of interest.

This reads like a parody greentext except you know OP is a sysad so there's no fucking way he's that self-aware

He is doing the right thing if only because he is preventing a child from playing Roblox.

He'd be a hero if he gave him a copy of Minecraft (or really almost any non-F2P game) to play instead.