Outgoing IT Staff: Security Concerns - Page 2

footfootfoot · 02-09-2012, 10:16 PM

lolz

Sundae · 02-12-2012, 03:43 PM

I realised I was being let go from my job in London when I turned up for my "assessment" after being off sick, to see a note on the door saying "PASSWORD HAS CHANGED - CALL OFFICE NUMBER TO BE ADMITTED!" and inside a note taped to the Reception window which read Do Not Use Credit Card Unless Authorised By [Artistic Director] which made it clear they'd changed the cards too.

That hurt more than my dismissal in the end.
They were informing everyone I was going before I even came in, so the meeting was a farce.
And they worried I might abuse my position of trust.
I hadn't and I didn't. But a wicked little flicker wished I had.

'Cept I'd have died inside if I had.

Gravdigr · 02-12-2012, 05:01 PM

Quote:

Originally Posted by footfootfoot

Whatever you do, no fingerprints and make it look like a robbery or suicide.

And be sure to put the body at the bottom of the stack of dead hobos.

Nobody searches all the way to the bottom.

wolf · 02-12-2012, 08:57 PM

Outside of making addition amusing comments regarding hobos, yeah. You're fooked. I think UT put it best.

Way nicer than my initial thought of "don't hire vindictive motherfuckers."

Clodfobble · 02-12-2012, 10:05 PM

So... did you let the guy go yet?

bluecuracao · 02-12-2012, 10:42 PM

Quote:

Originally Posted by Sundae

I realised I was being let go from my job in London when I turned up for my "assessment" after being off sick, to see a note on the door saying "PASSWORD HAS CHANGED - CALL OFFICE NUMBER TO BE ADMITTED!" and inside a note taped to the Reception window which read Do Not Use Credit Card Unless Authorised By [Artistic Director] which made it clear they'd changed the cards too.

That hurt more than my dismissal in the end.
They were informing everyone I was going before I even came in, so the meeting was a farce.
And they worried I might abuse my position of trust.
I hadn't and I didn't. But a wicked little flicker wished I had.

'Cept I'd have died inside if I had.

Circumstances were somewhat the same for me. My immediate supervisor, at least, was nice enough to admit that he'd known far in advance of my pending layoff, and it killed him to have to keep it from me. But it was depressing to realize that the big boss didn't think I could be trusted.

It was kind of ironic, because he was one of the most impressive liars I'd seen in action. I guess people who roll that way think that everyone else does, too.

BigV · 02-13-2012, 10:25 AM

It's an avoidable risk, making preemptive changes like that, and they make good business sense. HOW TO end the employee/employer relationship is a different question, and has as many answers as there are combinations of bosses and workers times the number of businesses.

wolf · 02-13-2012, 12:32 PM

Unrealistic, perhaps, but what about adding another layer of security requiring the use of one of those changing passkey card thingies that you can't get into the system without? My sister works for an international company that moves a lot of money (she occasionally talked about accounting errors that she had to chase down involving a couple of million dollars as though it was like my checkbook being off by 23 cents) around that has those things.

Probably cheaper than having the whole system brought down around your ears.

Undertoad · 02-13-2012, 12:46 PM

SecurID

Which is fine if there's already a VPN in place that can take advantage of it. The thing is, if the network wasn't built to be secure in the first place, it might be hard to identify every possible insecure corner. You could work really hard to protect the VPN with SecurID, and still find a back door in a wireless router someone put in on the 3rd floor to get to a printer.

zippyt · 02-13-2012, 01:19 PM

When i installed Alarms there was this semi disgruntled coworker , he was good about installing wireless switches so he could set off the fire alarm or the panic alarm as he drove by ,
hell i programmed an Alarm to sound the out side siren for 5 minets EVERY time a customer armed or disarmed their alarm , they were Butt heads !!!

HungLikeJesus · 02-13-2012, 04:49 PM

It's interesting to see the many ways the anonymous login gets used.

glatt · 02-13-2012, 05:10 PM

I'm tempted to log in as anon and make up a story about a crazy time firing this guy and how he was able to remotely turn the sprinkler system on in the building after he left. And we ended up paying him half a million just to leave us alone, but we're still not sure.

HungLikeJesus · 02-13-2012, 05:18 PM

I think we should have a thread where everyone has to be logged in as anonymous to post. That would be interesting.

ZenGum · 02-13-2012, 06:44 PM

Just a thought from a noob who felt proud of himself for adding a few RAM chips to a laptop:

Even if you can't secure the system, can you set up a way of logging everything that is done in a way that cannot be erased? It wouldn't prevent tampering, but it would enable you to prove that tampering had been done, and that might deter the individual.

richlevy · 02-13-2012, 10:35 PM

Quote:

Originally Posted by Undertoad

SecurID

Love them. Have used them for decades. I wish the bank I have my checking account with would offer it.

02-09-2012, 10:16 PM	#16
footfootfoot To shreds, you say? Join Date: Aug 2004 Location: in the house and on the street-how many, many feet we meet! Posts: 18,449	lolz __________________ The internet is a hateful stew of vomit you can never take completely seriously. - Her Fobs

02-12-2012, 08:57 PM	#19
wolf lobber of scimitars Join Date: Jul 2001 Location: Phila Burbs Posts: 20,774	Outside of making addition amusing comments regarding hobos, yeah. You're fooked. I think UT put it best. Way nicer than my initial thought of "don't hire vindictive motherfuckers." __________________ wolf eht htiw og "Conspiracies are the norm, not the exception." --G. Edward Griffin The Creature from Jekyll Island High Priestess of the Church of the Whale Penis

02-12-2012, 10:05 PM	#20
Clodfobble UNDER CONDITIONAL MITIGATION Join Date: Mar 2004 Location: Austin, TX Posts: 20,012	So... did you let the guy go yet? __________________ My book My other book My spirit animal

02-13-2012, 10:25 AM	#22
BigV Goon Squad Leader Join Date: Nov 2004 Location: Seattle Posts: 27,063	It's an avoidable risk, making preemptive changes like that, and they make good business sense. HOW TO end the employee/employer relationship is a different question, and has as many answers as there are combinations of bosses and workers times the number of businesses. __________________ Be Just and Fear Not.

02-13-2012, 12:32 PM	#23
wolf lobber of scimitars Join Date: Jul 2001 Location: Phila Burbs Posts: 20,774	Unrealistic, perhaps, but what about adding another layer of security requiring the use of one of those changing passkey card thingies that you can't get into the system without? My sister works for an international company that moves a lot of money (she occasionally talked about accounting errors that she had to chase down involving a couple of million dollars as though it was like my checkbook being off by 23 cents) around that has those things. Probably cheaper than having the whole system brought down around your ears. __________________ wolf eht htiw og "Conspiracies are the norm, not the exception." --G. Edward Griffin The Creature from Jekyll Island High Priestess of the Church of the Whale Penis

02-12-2012, 03:43 PM	#17
Sundae polaroid of perfection Join Date: Sep 2005 Location: West Yorkshire Posts: 24,185	I realised I was being let go from my job in London when I turned up for my "assessment" after being off sick, to see a note on the door saying "PASSWORD HAS CHANGED - CALL OFFICE NUMBER TO BE ADMITTED!" and inside a note taped to the Reception window which read Do Not Use Credit Card Unless Authorised By [Artistic Director] which made it clear they'd changed the cards too. That hurt more than my dismissal in the end. They were informing everyone I was going before I even came in, so the meeting was a farce. And they worried I might abuse my position of trust. I hadn't and I didn't. But a wicked little flicker wished I had. 'Cept I'd have died inside if I had.

02-13-2012, 12:46 PM	#24
Undertoad Radical Centrist Join Date: Jan 2001 Location: Cottage of Prussia Posts: 31,423	SecurID Which is fine if there's already a VPN in place that can take advantage of it. The thing is, if the network wasn't built to be secure in the first place, it might be hard to identify every possible insecure corner. You could work really hard to protect the VPN with SecurID, and still find a back door in a wireless router someone put in on the 3rd floor to get to a printer.

02-13-2012, 01:19 PM	#25
zippyt LONG LIVE KING ZIPPY! per Feetz Join Date: Mar 2003 Location: Arkansas Posts: 7,661	When i installed Alarms there was this semi disgruntled coworker , he was good about installing wireless switches so he could set off the fire alarm or the panic alarm as he drove by , hell i programmed an Alarm to sound the out side siren for 5 minets EVERY time a customer armed or disarmed their alarm , they were Butt heads !!! __________________ "Success is getting what you want. Happiness is wanting what you get. " Brother Dave Gardner

02-13-2012, 04:49 PM	#26
HungLikeJesus Only looks like a disaster tourist Join Date: Feb 2007 Location: above 7,000 feet Posts: 7,208	It's interesting to see the many ways the anonymous login gets used. __________________ Keep Your Bodies Off My Lawn SteveDallas's Random Thread Picker.

02-13-2012, 05:10 PM	#27
glatt ™ Join Date: Jul 2003 Location: Arlington, VA Posts: 27,717	I'm tempted to log in as anon and make up a story about a crazy time firing this guy and how he was able to remotely turn the sprinkler system on in the building after he left. And we ended up paying him half a million just to leave us alone, but we're still not sure.

02-13-2012, 05:18 PM	#28
HungLikeJesus Only looks like a disaster tourist Join Date: Feb 2007 Location: above 7,000 feet Posts: 7,208	I think we should have a thread where everyone has to be logged in as anonymous to post. That would be interesting. __________________ Keep Your Bodies Off My Lawn SteveDallas's Random Thread Picker.

02-13-2012, 06:44 PM	#29
ZenGum Doctor Wtf Join Date: Oct 2007 Location: Badelaide, Baustralia Posts: 12,861	Just a thought from a noob who felt proud of himself for adding a few RAM chips to a laptop: Even if you can't secure the system, can you set up a way of logging everything that is done in a way that cannot be erased? It wouldn't prevent tampering, but it would enable you to prove that tampering had been done, and that might deter the individual. __________________ Shut up and hug. MoreThanPretty, Nov 5, 2008. Just because I'm nominally polite, does not make me a pussy. Sundae Girl.

Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)