@ThoriumBR tbh, not worth the risk

most of the time companies have standard images for a machine and manage their own licencing

@forest I think they were saying 'we were managing the systems ourselves, on our baseline"

and FDE matters if in theory you're worried that someone could pull the disks and edit them offline

@JourneymanGeek I imagine someone ambitious enough to attempt some sort of attack against Tor would be willing to do a bit more complex stuff.

@nobody depends but here it would make more sense to do it elsewhere and... you don't poo where you eat... so sponsoring tor then hacking them is dumb

vaguely relatedly

securelist.com/…