Outgoing IT Staff: Security Concerns - Page 2

Pete Zicato · 02-09-2012, 08:35 PM

I'm not really up on security issues, but it would help to know what kind of systems/network we're talking about.

footfootfoot · 02-09-2012, 09:14 PM

Quote:

Originally Posted by ZenGum

FFF's method is clearly easier.

Thank you, Doctor. I cut to the chase.

monster · 02-09-2012, 09:12 PM

You are probably fucked unless they have absolutely no idea they are about to be let go. In which case, the long exit interview and security guard accompaniment can buy time to check/reset the obvious. And even then, if they did bad things, they probably also have if-I-am-caught-revenge-things-set-up. If there is no severance pay, perhaps you could negotiate something?

Consult with their replacement. You do have a replacement, right?

footfootfoot · 02-09-2012, 10:16 PM

lolz

Sundae · 02-12-2012, 03:43 PM

I realised I was being let go from my job in London when I turned up for my "assessment" after being off sick, to see a note on the door saying "PASSWORD HAS CHANGED - CALL OFFICE NUMBER TO BE ADMITTED!" and inside a note taped to the Reception window which read Do Not Use Credit Card Unless Authorised By [Artistic Director] which made it clear they'd changed the cards too.

That hurt more than my dismissal in the end.
They were informing everyone I was going before I even came in, so the meeting was a farce.
And they worried I might abuse my position of trust.
I hadn't and I didn't. But a wicked little flicker wished I had.

'Cept I'd have died inside if I had.

bluecuracao · 02-12-2012, 10:42 PM

Quote:

Originally Posted by Sundae

I realised I was being let go from my job in London when I turned up for my "assessment" after being off sick, to see a note on the door saying "PASSWORD HAS CHANGED - CALL OFFICE NUMBER TO BE ADMITTED!" and inside a note taped to the Reception window which read Do Not Use Credit Card Unless Authorised By [Artistic Director] which made it clear they'd changed the cards too.

That hurt more than my dismissal in the end.
They were informing everyone I was going before I even came in, so the meeting was a farce.
And they worried I might abuse my position of trust.
I hadn't and I didn't. But a wicked little flicker wished I had.

'Cept I'd have died inside if I had.

Circumstances were somewhat the same for me. My immediate supervisor, at least, was nice enough to admit that he'd known far in advance of my pending layoff, and it killed him to have to keep it from me. But it was depressing to realize that the big boss didn't think I could be trusted.

It was kind of ironic, because he was one of the most impressive liars I'd seen in action. I guess people who roll that way think that everyone else does, too.

wolf · 02-12-2012, 08:57 PM

Outside of making addition amusing comments regarding hobos, yeah. You're fooked. I think UT put it best.

Way nicer than my initial thought of "don't hire vindictive motherfuckers."

Clodfobble · 02-12-2012, 10:05 PM

So... did you let the guy go yet?

BigV · 02-13-2012, 10:25 AM

It's an avoidable risk, making preemptive changes like that, and they make good business sense. HOW TO end the employee/employer relationship is a different question, and has as many answers as there are combinations of bosses and workers times the number of businesses.

wolf · 02-13-2012, 12:32 PM

Unrealistic, perhaps, but what about adding another layer of security requiring the use of one of those changing passkey card thingies that you can't get into the system without? My sister works for an international company that moves a lot of money (she occasionally talked about accounting errors that she had to chase down involving a couple of million dollars as though it was like my checkbook being off by 23 cents) around that has those things.

Probably cheaper than having the whole system brought down around your ears.

Undertoad · 02-13-2012, 12:46 PM

SecurID

Which is fine if there's already a VPN in place that can take advantage of it. The thing is, if the network wasn't built to be secure in the first place, it might be hard to identify every possible insecure corner. You could work really hard to protect the VPN with SecurID, and still find a back door in a wireless router someone put in on the 3rd floor to get to a printer.

richlevy · 02-13-2012, 10:35 PM

Quote:

Originally Posted by Undertoad

SecurID

Love them. Have used them for decades. I wish the bank I have my checking account with would offer it.

zippyt · 02-13-2012, 01:19 PM

When i installed Alarms there was this semi disgruntled coworker , he was good about installing wireless switches so he could set off the fire alarm or the panic alarm as he drove by ,
hell i programmed an Alarm to sound the out side siren for 5 minets EVERY time a customer armed or disarmed their alarm , they were Butt heads !!!

HungLikeJesus · 02-13-2012, 04:49 PM

It's interesting to see the many ways the anonymous login gets used.

glatt · 02-13-2012, 05:10 PM

I'm tempted to log in as anon and make up a story about a crazy time firing this guy and how he was able to remotely turn the sprinkler system on in the building after he left. And we ended up paying him half a million just to leave us alone, but we're still not sure.

02-09-2012, 08:35 PM	#1
Pete Zicato Turns out my CRS is a symptom of TMB. Join Date: Jan 2010 Location: Chicago suburbs Posts: 2,916	I'm not really up on security issues, but it would help to know what kind of systems/network we're talking about. __________________ Talk nerdy to me.

02-09-2012, 09:12 PM	#3
monster I hear them call the tide Join Date: Dec 2005 Location: Perpetual Chaos Posts: 30,852	You are probably fucked unless they have absolutely no idea they are about to be let go. In which case, the long exit interview and security guard accompaniment can buy time to check/reset the obvious. And even then, if they did bad things, they probably also have if-I-am-caught-revenge-things-set-up. If there is no severance pay, perhaps you could negotiate something? Consult with their replacement. You do have a replacement, right? __________________ The most difficult thing is the decision to act, the rest is merely tenacity Amelia Earhart

02-09-2012, 10:16 PM	#4
footfootfoot To shreds, you say? Join Date: Aug 2004 Location: in the house and on the street-how many, many feet we meet! Posts: 18,449	lolz __________________ The internet is a hateful stew of vomit you can never take completely seriously. - Her Fobs

02-12-2012, 08:57 PM	#7
wolf lobber of scimitars Join Date: Jul 2001 Location: Phila Burbs Posts: 20,774	Outside of making addition amusing comments regarding hobos, yeah. You're fooked. I think UT put it best. Way nicer than my initial thought of "don't hire vindictive motherfuckers." __________________ wolf eht htiw og "Conspiracies are the norm, not the exception." --G. Edward Griffin The Creature from Jekyll Island High Priestess of the Church of the Whale Penis

02-12-2012, 10:05 PM	#8
Clodfobble UNDER CONDITIONAL MITIGATION Join Date: Mar 2004 Location: Austin, TX Posts: 20,012	So... did you let the guy go yet? __________________ My book My other book My spirit animal

02-12-2012, 03:43 PM	#5
Sundae polaroid of perfection Join Date: Sep 2005 Location: West Yorkshire Posts: 24,185	I realised I was being let go from my job in London when I turned up for my "assessment" after being off sick, to see a note on the door saying "PASSWORD HAS CHANGED - CALL OFFICE NUMBER TO BE ADMITTED!" and inside a note taped to the Reception window which read Do Not Use Credit Card Unless Authorised By [Artistic Director] which made it clear they'd changed the cards too. That hurt more than my dismissal in the end. They were informing everyone I was going before I even came in, so the meeting was a farce. And they worried I might abuse my position of trust. I hadn't and I didn't. But a wicked little flicker wished I had. 'Cept I'd have died inside if I had.

02-13-2012, 10:25 AM	#9
BigV Goon Squad Leader Join Date: Nov 2004 Location: Seattle Posts: 27,063	It's an avoidable risk, making preemptive changes like that, and they make good business sense. HOW TO end the employee/employer relationship is a different question, and has as many answers as there are combinations of bosses and workers times the number of businesses. __________________ Be Just and Fear Not.

02-13-2012, 12:32 PM	#10
wolf lobber of scimitars Join Date: Jul 2001 Location: Phila Burbs Posts: 20,774	Unrealistic, perhaps, but what about adding another layer of security requiring the use of one of those changing passkey card thingies that you can't get into the system without? My sister works for an international company that moves a lot of money (she occasionally talked about accounting errors that she had to chase down involving a couple of million dollars as though it was like my checkbook being off by 23 cents) around that has those things. Probably cheaper than having the whole system brought down around your ears. __________________ wolf eht htiw og "Conspiracies are the norm, not the exception." --G. Edward Griffin The Creature from Jekyll Island High Priestess of the Church of the Whale Penis

02-13-2012, 12:46 PM	#11
Undertoad Radical Centrist Join Date: Jan 2001 Location: Cottage of Prussia Posts: 31,423	SecurID Which is fine if there's already a VPN in place that can take advantage of it. The thing is, if the network wasn't built to be secure in the first place, it might be hard to identify every possible insecure corner. You could work really hard to protect the VPN with SecurID, and still find a back door in a wireless router someone put in on the 3rd floor to get to a printer.

02-13-2012, 01:19 PM	#13
zippyt LONG LIVE KING ZIPPY! per Feetz Join Date: Mar 2003 Location: Arkansas Posts: 7,661	When i installed Alarms there was this semi disgruntled coworker , he was good about installing wireless switches so he could set off the fire alarm or the panic alarm as he drove by , hell i programmed an Alarm to sound the out side siren for 5 minets EVERY time a customer armed or disarmed their alarm , they were Butt heads !!! __________________ "Success is getting what you want. Happiness is wanting what you get. " Brother Dave Gardner

02-13-2012, 04:49 PM	#14
HungLikeJesus Only looks like a disaster tourist Join Date: Feb 2007 Location: above 7,000 feet Posts: 7,208	It's interesting to see the many ways the anonymous login gets used. __________________ Keep Your Bodies Off My Lawn SteveDallas's Random Thread Picker.

02-13-2012, 05:10 PM	#15
glatt ™ Join Date: Jul 2003 Location: Arlington, VA Posts: 27,717	I'm tempted to log in as anon and make up a story about a crazy time firing this guy and how he was able to remotely turn the sprinkler system on in the building after he left. And we ended up paying him half a million just to leave us alone, but we're still not sure.

Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)

Thread Tools
Show Printable Version Email this Page
Display Modes
Switch to Linear Mode Hybrid Mode Switch to Threaded Mode