スプリットショックウイルス †
"better software stacks" is irrelevent it's networking
The "best practices" for NetOps is to literally make it impossible to do my job.
Just make things so secure you can't use them.
It's not enough to have physical locked doors
It's not enough to have ip cameras
it's not enough to have a man trap
it's not enough to have biometric scanners
it's not enough to have caged security for servers
it's not enough to have segmented networks with vlans (which are not properly documented because muh authorized knowledge 
)
you also have to have port security on and then get authorization, which I submitted for two days ago.
my task being delayed costs the company $30k per month, NetOps making up the bullshit policy for port security for an already physically secured environment is not adding any security value.
@splitshockvirus
> bullshit policy for port security for an already physically secured environment
The network admin at the company I've worked for in the mid 2000s enabled something like this — so the ports of all the switches get associated with the MAC address of the device plugged into it and… The network in the whole office went down.
It took us half a day to find what was the issue — someone left a passive switch in the conference room that had a cable plugged into itself 🤣
@nerdtronics@mstdn.starnix.network
