

I dunno if it’s exciting but I do have and use an Entra joined and InTune managed Linux Mint laptop with a full security stack loaded as described above. It works.
The object of a system of authority is order, not justice. Justice matters only after injustice sufficiently compromises order.


I dunno if it’s exciting but I do have and use an Entra joined and InTune managed Linux Mint laptop with a full security stack loaded as described above. It works.


Yep but…
Here’s Microsoft - https://learn.microsoft.com/en-us/entra/identity/devices/sso-linux?tabs=debian-install%2Cdebian-update%2Cdebian-uninstall
Google has a variety of IDM methods including Ubuntu Authd and Secure Cloud LDAP. There’s also 3rd party tools like JumpCloud, ScaleOrange, etc.
Okta appears to have ASA and OPA although I’m not familiar with either of them. Ping has PingID and Ping Federate, although again I haven’t used either of them.
So depending on your cloud and needs the IdM / IAM is either available NOW or it will be very soon. 😀


The corporate crowd will stay on Windows because they benefit from propping up other corporations.
I wouldn’t be so sure. An interesting indicator of the shift that many of you wouldn’t see is how many vendors of management and security software have put out Linux versions in the past 12 months. I’m talking about stuff like RMM (Remote Monitoring & Management), EDR / MDR (Endpoint Detection & Response / Managed Detection & Response) client side DNS filtering software, and other things.
This tooling is for managing and securing endpoints used by companies, either by internal IT or by MSPs. These vendors wouldn’t be making and releasing these tools unless they were being asked for them AND there was going to be stead long term demand.
Turns out that once a companies stuff is in the cloud its users really don’t need MS Windows anymore so as long as you can centrally manage and secure it Linux makes a perfectly fine endpoint OS.


It ain’t Ubiquiti selling that gear to them. Better luck next time.


This is a narrative being pushed by a capital investment group that’s shorting Ubiquiti stock.


Oh look, a hit piece put out by a media company that’s owned by a capital investment group that is shorting UIs stock…I wonder what this could be about?!
Ubiquiti may not be blameless but this article is ridiculous.
Ubi isn’t selling this stuff to the Russians and neither are their vendors. Their vendors, most of them in the article are from overseas, are selling them to middle-men who sell them to another middle-man who then physically gets the equipment into Russian hands where it potentially goes through ANOTHER middle man before its used by Russian troops. There’s almost no way to control that and if you read carefully the “legal experts” quoted toward the bottom of the article use some very careful language in order to not tell you this.
You can’t just “shut it down” either, although even the article notes that Ubi is trying. Most of the gear that’s getting into Russian military hands for use in the war is stuff that you have probably never used. It’s PowerBeam and NanoBeam product that’s most often used by WISPs, which makes sense because that’s precisely how Russian forces are using it. What the article isn’t telling you is that this stuff does NOT need hooked to the Cloud in order to function. In fact it doesn’t need Internet access at all and so there’s no way for Ubi to know where it’s being used or even that it’s been powered up!
Even if Ubi can tell that the equipment is powered on and in use they may not know where it’s at with sufficient accuracy or knowledge to do anything about it. The damn thing could be on the Internet via Starlink sitting in Pokrovsk. On December 1st, 2025 was a SL system with Ubi gear attached to it in Pokrovsk being operated by Russia or Ukraine? There’s literally no way for Ubi or anyone else to know.
As for Ubi doing more if you read the whole article you’ll find that more than a few of these bad distributors HAVE been caught and shut down across the globe which almost certainly means that Ubi is helping at some level.
In short the article looks bad but when you start breaking down the individual points it quickly falls apart, especially when the media company behind it has a monetary interest in sinking Ubiquiti’s stock.


Nah, according to the article this is mostly the WISP type stuff, particularly the Power and Nano beam products meant for Long Range Point to Point / Multi Point connections. This isn’t routers / switches / etc.
Tech Aura. If you have it you understand. If you don’t then you watch in awed frustration as the computer that refused to work 10 seconds ago suddenly starts behaving when I.T. touches it. As an aside you know your I.T. are real wizards when stuff starts working just because they walked in the room or answered the phone. :)


The NRA has remained silent when white guys got shot as well. It’s not a race thing its a bootlicking thing. That’s why this mild rebuke is a big deal, they don’t normally say a damn thing when LE shoots someone regardless of the victims race or ethnicity.
Take a deep breath folks, its about to get wild.


Microsoft should not have the keys to decrypt Bitlocker ever.
Windows is a closed source and proprietary commercial Operating System. Microsoft is going to do whatever they like with it. If enough people get angry about an issue they may change their mind but that doesn’t change the nature of Microsoft’s ownership over their products.
I’ve been participating in discussion about what Microsoft should and shouldn’t do since the late 80s and it pretty much boils down to this: You need to select and use software that works the way you want it to. So if you don’t want MS to have your disk encryption key then don’t use Windows. If you don’t want MS to have access to your documents then don’t put them on any system that MS has control over.
It can be terrible inconvenient to protect your data in this way but this part and parcel of the privacy movement.


It may seem that way but I’m really not. An encryption key is just data. It’s critical security data to be sure but it’s still data and like other data you shouldn’t share anything that you wouldn’t want made public.
Don’t want MS to cough up your data when asked? Then don’t give it to them. In regards to your BL key that means storing it another way, such as on a jump drive or printing it out.
In the end if you have data of any type that you absolutely DO NOT want made public then you need to retain that data locally. If that means leaving the Microsoft or any other ecosystem then that’s the price that needs paid for keeping your data under your control.
This is the foundation of the entire privacy movement.


The encryption key is data, don’t give it to ANYONE. “Two people can keep a secret if one of them is dead.”


The word “Gave” is really doing some heavy lifting in that title. Microsoft produced the keys in response to a warrant as required by law.
If you don’t want a company, any company, to produce your data when given a warrant then you can’t give the company that data. At all. Ever.
Not fast food joints, not Uber, not YouTube, not even the grocery store.


It’s easy to do. Mine is a reolink piped through Home Assistant.


I hear ya but honestly you wouldn’t have the service let alone the devices without it.
Too many people thought that Twitters Blue Checkmark meant you were special. That attitude carries over to Bluesky and being verified.


Classic Liberal, yes.


You are not spending tens of millions annually and thus Microsoft doesn’t give a shit about you. They literally would not piss on you if you were on fire.
Good!