Another one is an unholy confluence of corporate compliance bullshit Connecting to the remote machine needs to go through corporate SSO (in a browser) that then starts the native remote client. Policy requires MFA, strong, frequently changed passwords and Windows Hello on the laptop. Policy also requires screen lock after 5 minutes. For some reason policy also requires disabling copy-paste to remote machines. The end…
Cloud desktops aren't as good as you'd think
221–230 of 479 posts
Re: Cloud desktops aren't as good as you'd think
#222Yep. Having worked in these environments, this solution is almost always sold to companies that are working around shitty hard to reproduce software stacks, staff trust issues, scale up difficulties and checkbox security cargo cults. The resulting outcome is usually increased staff turnover, increased cost and decreased productivity. Most of this they are having trouble rationalising or acknowledging still. You don't…
Re: Cloud desktops aren't as good as you'd think
#223Earlier quoted context omitted.
I'd love to do that, but my laptop's and workstation's state inevitably get out of sync leading up to "wait why doesn't this work ... spend a couple of minutes .. ah yes I did X on the other device". (Before someone suggest "use docker": then I'd need a more powerful workstation and laptop :-) And VNCing into my workstation from the laptop has all the drawbacks that Matthew described in the article.
If you do your work in VSCode you can setup the following pretty easily and it works really well (I use it to connect to my workstation in my home office when I work in a coffee shop on my laptop or the rare occasions I go into the office): 1. Install Tailscale ( https://tailscale.com/ ) on your laptop and workstation and enable the "MagicDNS" ( https://tailscale.com/kb/1081/magicdns/ ) feature. This sets up a VPN me…
Is this faster than a traditional VPN? Is the VSCode remote development extension not able to function with a traditional VPN?
Re: Cloud desktops aren't as good as you'd think
#224Whoa, I thought they are absolutely pointless. Are they even worse?
The idea is pretty good, for light office work, but as it stands now, I wouldn't subject anyone to using Cloud desktops for any extended period of time.
But the title is pretty confusing, when you think that cloud desktops are pretty terrible and now some one claims that they are even worse.
Re: Cloud desktops aren't as good as you'd think
#225Earlier quoted context omitted.
sadly, the job of a CISO typically isn't "make the most pragmatic decisions possible to keep our infrastructure secure and running smoothly". In many industries, it's more lke "join as many compliance programs as possible to expand the ability to capture revenue from regulated markets". The CISO didn't make the decision to enforce password rotation- the compliance programs your sales team asked for did
To your point, password rotation is considered an insecure practice because it causes people to append 1, 2, 3, etc to the same password. But I've seen so many companies that still insist on it.
I had a very brief talk with the IT team for the larger parent company when I started and explained this stupid password rotation thing, as I came from a security background, they wanted nothing of it. Set in their ways.
For the new non-profit that I'm helping spearhead, I'm not sure I'll get away from the password rotation entirely, but I can certainly set it to something more reasonable, like every 365 days, rather than every 60 days or whatever travesty most are dealing with. I'm pretty pleased about this.
Re: Cloud desktops aren't as good as you'd think
#226Earlier quoted context omitted.
If you do your work in VSCode you can setup the following pretty easily and it works really well (I use it to connect to my workstation in my home office when I work in a coffee shop on my laptop or the rare occasions I go into the office): 1. Install Tailscale ( https://tailscale.com/ ) on your laptop and workstation and enable the "MagicDNS" ( https://tailscale.com/kb/1081/magicdns/ ) feature. This sets up a VPN me…
I'm a little confused as to what benefic the "MagicDNS"/Tailscale aspect is adding? Is this faster than a traditional VPN? Is the VSCode remote development extension not able to function with a traditional VPN?
(Not op, just butting in)
Re: Cloud desktops aren't as good as you'd think
#227The cost of a new fullly-spec'd workstation + high performance laptop is tiny compared to the salary of good software developers. Managements have a warped sense of how to save money and as a result grossly hurt morale and productivity where it matters the most.
> The cost of a new fullly-spec'd workstation + high performance laptop is tiny compared to the salary of good software developers. That depends highly on where you are in the world.
Re: Cloud desktops aren't as good as you'd think
#228Earlier quoted context omitted.
For the life of me I don’t understand why folks default to laptops for development. Yes portability is great, but most of us park our behinds at the same desk everyday. If I’m going to be out of the office (away from home) I take a laptop and remote into the desktop! Even M1 macs (I have one and love it), while powerful, just can’t hold a candle to a workstation class machine.
I'd love to do that, but my laptop's and workstation's state inevitably get out of sync leading up to "wait why doesn't this work ... spend a couple of minutes .. ah yes I did X on the other device". (Before someone suggest "use docker": then I'd need a more powerful workstation and laptop :-) And VNCing into my workstation from the laptop has all the drawbacks that Matthew described in the article.
Why do you believe that to be the case? Docker performance overhead is so minimal I highly doubt you'd be able to tell any difference compared to native processes.
Re: Cloud desktops aren't as good as you'd think
#229Earlier quoted context omitted.
If you do your work in VSCode you can setup the following pretty easily and it works really well (I use it to connect to my workstation in my home office when I work in a coffee shop on my laptop or the rare occasions I go into the office): 1. Install Tailscale ( https://tailscale.com/ ) on your laptop and workstation and enable the "MagicDNS" ( https://tailscale.com/kb/1081/magicdns/ ) feature. This sets up a VPN me…
I'm a little confused as to what benefic the "MagicDNS"/Tailscale aspect is adding? Is this faster than a traditional VPN? Is the VSCode remote development extension not able to function with a traditional VPN?
Re: Cloud desktops aren't as good as you'd think
#230Try working in banking for 20 years, stuck behind at least 1 layer of citrix living in citrix inception. Latency for every keystroke, your brain starts to add latency to latency that is not there to compensate for a life lived wearing citrix latency goggles.