The Cellar

The Cellar (http://cellar.org/index.php)
-   Technology (http://cellar.org/forumdisplay.php?f=7)
-   -   Outgoing IT Staff: Security Concerns (http://cellar.org/showthread.php?t=26843)

footfootfoot 02-09-2012 10:16 PM

lolz

Sundae 02-12-2012 03:43 PM

I realised I was being let go from my job in London when I turned up for my "assessment" after being off sick, to see a note on the door saying "PASSWORD HAS CHANGED - CALL OFFICE NUMBER TO BE ADMITTED!" and inside a note taped to the Reception window which read Do Not Use Credit Card Unless Authorised By [Artistic Director] which made it clear they'd changed the cards too.

That hurt more than my dismissal in the end.
They were informing everyone I was going before I even came in, so the meeting was a farce.
And they worried I might abuse my position of trust.
I hadn't and I didn't. But a wicked little flicker wished I had.

'Cept I'd have died inside if I had.

Gravdigr 02-12-2012 05:01 PM

Quote:

Originally Posted by footfootfoot (Post 793945)
Whatever you do, no fingerprints and make it look like a robbery or suicide.

And be sure to put the body at the bottom of the stack of dead hobos.

Nobody searches all the way to the bottom.

wolf 02-12-2012 08:57 PM

Outside of making addition amusing comments regarding hobos, yeah. You're fooked. I think UT put it best.

Way nicer than my initial thought of "don't hire vindictive motherfuckers."

Clodfobble 02-12-2012 10:05 PM

So... did you let the guy go yet?

bluecuracao 02-12-2012 10:42 PM

Quote:

Originally Posted by Sundae (Post 794652)
I realised I was being let go from my job in London when I turned up for my "assessment" after being off sick, to see a note on the door saying "PASSWORD HAS CHANGED - CALL OFFICE NUMBER TO BE ADMITTED!" and inside a note taped to the Reception window which read Do Not Use Credit Card Unless Authorised By [Artistic Director] which made it clear they'd changed the cards too.

That hurt more than my dismissal in the end.
They were informing everyone I was going before I even came in, so the meeting was a farce.
And they worried I might abuse my position of trust.
I hadn't and I didn't. But a wicked little flicker wished I had.

'Cept I'd have died inside if I had.

Circumstances were somewhat the same for me. My immediate supervisor, at least, was nice enough to admit that he'd known far in advance of my pending layoff, and it killed him to have to keep it from me. But it was depressing to realize that the big boss didn't think I could be trusted.

It was kind of ironic, because he was one of the most impressive liars I'd seen in action. I guess people who roll that way think that everyone else does, too.

BigV 02-13-2012 10:25 AM

It's an avoidable risk, making preemptive changes like that, and they make good business sense. HOW TO end the employee/employer relationship is a different question, and has as many answers as there are combinations of bosses and workers times the number of businesses.

wolf 02-13-2012 12:32 PM

Unrealistic, perhaps, but what about adding another layer of security requiring the use of one of those changing passkey card thingies that you can't get into the system without? My sister works for an international company that moves a lot of money (she occasionally talked about accounting errors that she had to chase down involving a couple of million dollars as though it was like my checkbook being off by 23 cents) around that has those things.

Probably cheaper than having the whole system brought down around your ears.

Undertoad 02-13-2012 12:46 PM

SecurID

Which is fine if there's already a VPN in place that can take advantage of it. The thing is, if the network wasn't built to be secure in the first place, it might be hard to identify every possible insecure corner. You could work really hard to protect the VPN with SecurID, and still find a back door in a wireless router someone put in on the 3rd floor to get to a printer.

zippyt 02-13-2012 01:19 PM

When i installed Alarms there was this semi disgruntled coworker , he was good about installing wireless switches so he could set off the fire alarm or the panic alarm as he drove by ,
hell i programmed an Alarm to sound the out side siren for 5 minets EVERY time a customer armed or disarmed their alarm , they were Butt heads !!!

HungLikeJesus 02-13-2012 04:49 PM

It's interesting to see the many ways the anonymous login gets used.

glatt 02-13-2012 05:10 PM

I'm tempted to log in as anon and make up a story about a crazy time firing this guy and how he was able to remotely turn the sprinkler system on in the building after he left. And we ended up paying him half a million just to leave us alone, but we're still not sure.

HungLikeJesus 02-13-2012 05:18 PM

I think we should have a thread where everyone has to be logged in as anonymous to post. That would be interesting.

ZenGum 02-13-2012 06:44 PM

Just a thought from a noob who felt proud of himself for adding a few RAM chips to a laptop:

Even if you can't secure the system, can you set up a way of logging everything that is done in a way that cannot be erased? It wouldn't prevent tampering, but it would enable you to prove that tampering had been done, and that might deter the individual.

richlevy 02-13-2012 10:35 PM

Quote:

Originally Posted by Undertoad (Post 794844)

Love them. Have used them for decades. I wish the bank I have my checking account with would offer it.


All times are GMT -5. The time now is 07:46 PM.

Powered by: vBulletin Version 3.8.1
Copyright ©2000 - 2025, Jelsoft Enterprises Ltd.