Why you don't log into your old bosses systems

Forums › IT Pro and developers › Why you don't log into your old bosses systems

myfullflavour

896 posts

Ultimate Geek
+1 received by user: 382

Trusted

Full Flavour

#126826 21-Jul-2013 11:25

http://sunlive.co.nz/news/49243-man-admits-computer-hacking.html

Knew this guy in school. Not surprised he was caught either, can bank $$ that at the time he thought everything he was doing was innocent.

The term 'hacking' might be a bit misleading, he likely knew all the passwords.

Another lesson here is to update logins when employees leave... I know of plenty of people who go work for competitors and don't forget their ex-employers logins overnight.

1080p

1332 posts

Uber Geek
+1 received by user: 152
Inactive user

#862998 21-Jul-2013 13:19

Haha, he would have had far fewer issues with some simple disk level encryption on that notebook.

raytaylor

4076 posts

Uber Geek
+1 received by user: 1296

Trusted

#863297 21-Jul-2013 22:54

I had a similar experience with a client.

I insisted that we have passwords for each staff member. Boss learned the hard way.
They liked the idea that if a staff member called in sick, anyone else could sit down in their chair and do their job without a problem.
Seemed like a good idea to prevent others at work calling you when you are at home recovering, but not good for security.

So despite my objections, when they had to make a staffmember redundant, this happened

http://www.stuff.co.nz/dominion-post/news/4454466/Guilty-plea-to-charge-of-accessing-firm-computer

Many people complain that their IT people are not very flexible and strict towards the staff of the companies they work for... I am now one of those I.T people.

Dont let your clients talk you into agreeing with their ideas without thinking them though first.

He had been logging in to look at emails and get evidence to take to the employment court about his redundancy being a "sham". Once another staffmember was made redundant a short time later, they both teamed up and decided to cause some damage. The police didnt really have anyone in hawkes bay who knew anything about computer crime and he got off lightly because the investigation wasnt done properly so they had to drop some charges.

Ray Taylor

There is no place like localhost

Spreadsheet for Comparing Electricity Plans Here

BinaryLimited

796 posts

Ultimate Geek
+1 received by user: 80

Trusted

#873798 8-Aug-2013 12:32

This is quite funny reading.

I worked for a company that did this to me, the GM Paul Gallop at Rendezvous Grand Hotel Auckland.
They decided to use my linkedin account to make all sorts of changes.

I took the IP and evidence ( provided to me by Linkedin ) to the police , which somehow convientently turned the case down.
Police response " we have more important things to do ".

Find it really strange that when the tables are turned, its a serious issue.

Binary Limited - Safe. Secure. Simple. ™
www.binarylimited.co.nz

gehenna

8667 posts

Uber Geek
+1 received by user: 3883

Moderator

Trusted

Lifetime subscriber

#873813 8-Aug-2013 12:51

BinaryLimited:
I took the IP and evidence ( provided to me by Linkedin ) to the police , which somehow convientently turned the case down.
Police response " we have more important things to do ". Find it really strange that when the tables are turned, its a serious issue.

Possibly you should have taken it to a lawyer instead? I'm not sure if the police are the right people to deal with when it comes to this stuff.

It's easy enough to do this sort of thing by accident too - in a previous job I had an RDP connection set up on my personal laptop to get into the RDS. One day I accidentally clicked on the wrong connection and it logged into the RDS just fine - so clearly my account wasn't removed or locked!

Those sorts of connections appear in security logs on Windows so if anyone had been auditing them it would have looked suspicious, even though there was no dodgy intent from my side.

Easy to see how some people can get caught out by this - but no doubt connecting to a prior workplace on purpose with full knowledge of your actions is really unethical!

BinaryLimited

796 posts

Ultimate Geek
+1 received by user: 80

Trusted

#873827 8-Aug-2013 13:15

Yeah the police do seem quite useless when it comes to technology, not sure if it is done conveniently or not?
the thing is, ontop of all the things that were done, my password was also changed a few times...my profile picture and name are my own.
So don't think this was done by "accident"

if the tables were turned, this would be a huge incident...disturbing

Binary Limited - Safe. Secure. Simple. ™
www.binarylimited.co.nz