Ask HN: Why not permit use Linux laptop for work

A lot of enterprises need to comply with regulations and security standards (e.g. PCI-DSS or SOC2) which often require them to implement systems and processes over their "control environment". They need to demonstrate that they can do things like enforce password requirements, or disable your device/account remotely (via MDM) if needed. It's not enough that you use their VPN.

I wouldn't call it wrong clients, just ones with different concerns and liabilities to consider.

I work with a B2B product, and the client requirements when it comes to security are absolutely a labyrinth to navigate for my teams and our product, and I cannot imagine the nightmare they must deal with on a day to day basis.

The reality of the regulatory scope for IT is that it's chaotic. I've come to the understanding that regardless of the enterprise, likely any given business is failing to meet the requirements of _some_ regulatory framework because of some system in use that was never designed to be framework compliant, it was just made to solve a problem.

Typically there are means for exceptions to the frameworks, but IT teams are reticent to submit such requests as it's not well defined in the regulation "what happens if you submit too many requests?"

Very likely there is an audit script or something the businesses can run to quickly approve/deny a new machine. I get the GP's frustration and your statement over such restrictions/requirements, but I also understand it from the other side; it's much easier to just play it safe than risk an auditor in a bad mood deciding that you're non-compliant and the non-sense that goes with the path back to compliance.

As others have mentioned, security is not just about connecting to a vpn. Bare in mind that the IT department has to take care of hundrends of techologically illiterate pc users in their organization and they need as much remote control as possible and as much standardization as possible. I am not saying it's undoable to plug in a linux pc in there, I am just describing some factors

Depending on what work you do exactly and how beefy your machine is, you can spin up a virtualbox with linux to do your job. I had such a case and did my work just fine.

Many companies have ISO, PCI, etc conditions that require them to maintain positive control over devices on their networks. This will include both security tools, like endpoint agents, but also policy controls like Active Directory and Intune (MDM). There are also a few oddball vpn services that only work under Windows (no clue why people buy them). Getting all that working under one operating system is difficult enough. Each additional OS generally requires a redo of those efforts, plus effort to maintain interoperability.

That said, there are efforts to get tools like Intune to work on Linux, but it's still early days.

Said as someone who vastly prefers working under Linux.

I've always used my own linux laptop in contracting work...

Get differrent clients...