10

So today I found a file share containing some super super sensitive information accessible to what I think was our entire user base (6,500 users) if you knew the server name and had an interest in nosing around.

I reported it to our head of IT and heard nothing after, although 5 mins after reporting I could no longer access...

I suspect the infrastructure lead is going to be a dick (because his one of them awkward non team player kind of guys) and not thank me for preventing our company from being in national news papers... but try to spin it on why am I nosing around his servers in the first place..

I actually feel 50/50 about if I should of told or not.. but on flip side, I guess the access logs of me listing the files as I flick through to confirm my suspicions would of caused s bigger headache.

Fucking useless infrastructure engineers!

Comments
  • 0
    you did well
  • 1
    Save the email. If there is ever a security breach the could try to pin it on you.
  • 0
    @georgelynch I emailed the head of IT detailing that I would likely appear on some of their logs between xx:xx and yy:yy on x day as I was proving my suspicions. And a full account and a partial reason I was on the server in a first place...

    Seems weird to explain " I was on the server because I just kinda get a kick out of nosing around how applications store their data on the file system..."

    What I wanted to say is I watch too much mr robot and really wanted to boot into my live copy of Kali and go to town like a ninja hacker!
  • 1
    Just yesterday I got accused of shutting down app pools on a production web server. They are not renewing my contract so I guess they thought I was getting revenge. I had never logged on to the server but I would never sabotage anyone. Ticked me off.
  • 0
    Just for educational purposes:
    *should have
    *would have
  • 1
    @georgelynch after I resigned, my boss accused me of stealing VGA to HDMI converter. I handle accounts worth 1/4th the total size of the company.
  • 0
    I think they make outgoing people the scapegoat for everything that goes wrong.
  • 0
    You did great. Regardless of who he is... You did the ethical and right thing. Kudos
  • 0
    As a follow up, I spoke to the infrastructure lead about this a week latter, his reply makes me want to punch him in the face “yeah it’s been like that for ages!”

    You fucking what!?!?!?? So you knew about it and didn’t do anything to fix it until your bosses boss tells you to!? Fucking jobs worth!
Add Comment