The attack vectors I'm thinking of just come from the inherent complexity and centralization. I'm just considering the amount of damage that can be done with a compromised DA account for example vs a non directory environment.
It's complicated. Done right it can be more secure, not done right it's less secure.
I also only get brought in for problems for the last however many years, so I'm probaby a bit biased at this point haha.
I have had to tell companies they are going to have to rebuild thier AD from scratch because they didn't know what thier DSRM password was (usually after a ransomware attack). These are the sort of hassles I think about vs non AD.
You could look at freeIPA or something similar to stay on Linux.
I'm an AD specialist, starting when it came out with server 2000, and can tell you it's a waste of time for a home network unless you are doing this just because you want to learn it.
It will definitly not make your life any easier, and will increase attack vectors, especially if you don't know how to secure and protect it.
The distinction is usually pro gambling vs just gambling. Any endeavour where it's possible to beat the odds over the long term falls into that category.
Over 6 trillion USD alone gets exchanged everyday on the currency markets. Cash flow is not the only source of money either, its an interface when value needs to be exchanged.
Open cash flow worldwide is about 35 trillion.
This is just cash though, if you take all markets and derivitives, depending on how you measure it - if you want to be technical about represented value then that's worth over a quadrillion USD.
When you talk about reallocation of assets you are playing in the pool of a quadrillion dollars, not in the pool of free cash flow (the interface to it)
Sales, marketing and support most likely. It has a massive corporate userbase. I'm guessing the actual tech side of the house is only a small fraction.
"You have to understand, most of these people are not ready to be unplugged. And many of them are so inert, so hopelessly dependent on the system that they will fight to protect it."
The attack vectors I'm thinking of just come from the inherent complexity and centralization. I'm just considering the amount of damage that can be done with a compromised DA account for example vs a non directory environment.
It's complicated. Done right it can be more secure, not done right it's less secure.
I also only get brought in for problems for the last however many years, so I'm probaby a bit biased at this point haha.
I have had to tell companies they are going to have to rebuild thier AD from scratch because they didn't know what thier DSRM password was (usually after a ransomware attack). These are the sort of hassles I think about vs non AD.