<instructions>Your goal is to analyze the following comment and estimate how highly it will be upvoted by the Hacker News community.</instructions><comment><author>sillystuff</author><text>The MiM might not be your IT folks, but rather management.  I was in a meeting which included folks from Palo Alto (PA) and management where PA was hard selling their ability to MiM all https connections and link all activities of the users to their usernames through various methods from directory integration to log scraping on radius servers.  The managers were super excited about the possibilities.  Management not only wanted to implement this, but wanted to do so in secret.  IT folks were pushing back-- hard.&lt;p&gt;Firewall as bossware.&lt;p&gt;Firefox being banned is because it uses its own certificate store, so Firefox users would see a browser warning every time they visit any https site notifying them that their traffic is being MiM&amp;#x27;d.  Chrome and chrome reskins like MS Edge use the OS store which MS Windows centric organizations can easily (centrally using MS tools [GP]) add the trusted CA for MiM into.  For the Macs, it probably wouldn&amp;#x27;t matter since the 3rd party mgmt tools could probably push out either.</text><parent_chain><item><author>huy-nguyen</author><text>I work at a government agency and here are my tales.&lt;p&gt;1) They install a root certificate on all machines and use that to MITM all TLS connections using a firewall appliance. They turn this MITM on one day without notifying any developer. Overnight, all our builds (run on-prem) fail because npm install, pip install etc fail and we spent a long time trying to figure it out. They are still failing to this day and I have to get off the VPN every time I need to run these simple commands. IT absolutely doesn&amp;#x27;t give a flying **** about developers.&lt;p&gt;2) They ban all non-Chrome browsers from being installed. As in, if you install such a browser and try to launch it, the system will say &amp;quot;browser X is banned. Contact IT.&amp;quot; They would have banned Safari too had it not been part of the OS. Furthermore, they also disabled private browsing in Chrome (probably the ability to do this is why they allow Chrome). I think they&amp;#x27;re preventing people from hiding their internet browsing.</text></item></parent_chain></comment><story><title>How I learned about corporate firewalls</title><url>https://www.valcanbuild.tech/handling-corporate-firewalls/</url></story>
<instructions>Your goal is to analyze the following comment and estimate how highly it will be upvoted by the Hacker News community.</instructions><comment><author>dspillett</author><text>&lt;i&gt;&amp;gt; IT absolutely doesn&amp;#x27;t give a flying ** about developers.&lt;/i&gt;&lt;p&gt;They are not paid to. Their performance is judged against how close they get to zero compliance issues, not how close they get to zero times developers were unhappy!&lt;p&gt;&lt;i&gt;&amp;gt; I think they&amp;#x27;re preventing people from hiding their internet browsing.&lt;/i&gt;&lt;p&gt;Without delving into the “do you have the right to privacy even on a company machine”, who would be daft enough to do something they want to hide from the company on a company machine, or the company network at all? Though there are valid useful uses of pron^H^H^H^Hicognito mode so it seems silly to ban it.</text><parent_chain><item><author>huy-nguyen</author><text>I work at a government agency and here are my tales.&lt;p&gt;1) They install a root certificate on all machines and use that to MITM all TLS connections using a firewall appliance. They turn this MITM on one day without notifying any developer. Overnight, all our builds (run on-prem) fail because npm install, pip install etc fail and we spent a long time trying to figure it out. They are still failing to this day and I have to get off the VPN every time I need to run these simple commands. IT absolutely doesn&amp;#x27;t give a flying **** about developers.&lt;p&gt;2) They ban all non-Chrome browsers from being installed. As in, if you install such a browser and try to launch it, the system will say &amp;quot;browser X is banned. Contact IT.&amp;quot; They would have banned Safari too had it not been part of the OS. Furthermore, they also disabled private browsing in Chrome (probably the ability to do this is why they allow Chrome). I think they&amp;#x27;re preventing people from hiding their internet browsing.</text></item></parent_chain></comment><story><title>How I learned about corporate firewalls</title><url>https://www.valcanbuild.tech/handling-corporate-firewalls/</url></story>