devRant - A fun community for developers to connect over code, tech & life as a programmer

This series of events contains an incredible amount of shier incomprehensible
stupidity. It is the reason I have decided to return to dR, because I NEED TO WENT
ABOUT THIS IDIOT and I don't know of any other place!

Background: I have written a small set of tools (Excel sheets, and a small
service running on an RPI) for
my school to manage staff (cafeteria workers, janitors, security, etc).
Importantly the included a small secure notes storage for each user (GPG encrypted, each
user was THE ONLY ONE with the password for the key, i.e. the only one able to
decrypt the data), which was available over the internet.

So on monday I recieved an email from the vice principal (the one who now has
control over the tools, and is an incredibly annoying and incompetent compsci
teacher, he knows basically nothing); the following email exchange went something like this
(translated the German formal and polite bullshit politeness to the gist of it):
VP: Uhmm, @xzvf, did you make a backup of the RPI?
Me: Why?
VP: No reason, just asking...
Me: *pings server, realizes it's down (I don't personally use it and it's not my
responsibility, so I haven't noticed it earlier)* What did you do!? Why is the
server down!?
VP: Nothing.... Nice weather we're have today. Do you have the backup???
Me: *Facepalm* No, you told me I'm not allowed to do it, because it contains sensitive data!
I gave you a guide to do it! Let me guess, you didn't do it? What did you do with
it?
VP: No, I never told you that! You are responsible! [He didn't tell me what happened]
Me: *One the one hand laughing hard at the this incompetent motherfucker, on the
other hand on the verge of shouting from his incompetence* Here, I told you it
in 4 emails, starting last September. [Quote the emails and his replies that he'll
do it 'soon']. Again, what did you do? I can set it up again and all but the
private notes storage and server settings are stored in the Office 365 Excel sheets
[Don't kill me, VP insisted on Excel, because he thinks of himself as an Excel wizard],
so those are still there.
VP: NOOO! I NEED THE PRIVATE STORAGE! NOW!
Me: 1) Don't speak to me like that! 2) That's impossible if the SD card died,
What did you do, and why didn't you back it up?
VP: Come to my office today after supper!

I come into the office and he starts getting angry at me, saying I AM THE HORRIBLE PERSON for not helping him, but I push him back with
evidence that it's not my fault. I almost left the office. I then managed to find out that the following
is what happened:

This moron decided it was a brilliant idea to put the RPI in a different box to
what it was in currently. He wanted to put it into a grey project box from the hardware
store, but once he put it in, he relized it was stupid, as you couldn't see the
power LED. His brilliant solution; drill a hole into the top of the box,
BUT WITH THE RPI ALREADY MOUNTED IN IT AND THE BOX ALREADY SCREWED BACK TOGETHER
AND PLUGGED IN. His lazy ass didn't want to take it apart, so with the RPI still in
the box and running, he used an electric drill to drill into the box. Only problem:
He drilled too far into the box and slipped after the drill went through, so
he ended up drilling into the RPI's SDcard and the power supply. So he WRECKED
THE BOARD.

After I managed to remove my palm from my face and not laugh at him [he had the audacity
to be visibly annoyed]. I said to him that it wasn't a big deal, just get a new
RPI and sdcard and set it back up.

Then he confessed to me the reason he *needed* the private notes storage back:
He was too lazy and cheap to use a proper password manager, so he used this service,
knowing fullwell that it was not backed up. He had one of those encrypted hard
drives with some important data on it, but he didn't know it's password it was only
there in his "password manager".

At this point I was close to shouting and showing an HIV INFESTED BURNING CACTUS
UP THIS WASTE OF OXYGEN'S ASS, but then I remembered the thing that'd save this
imbeciles data:
The web app for this service had a copy of the encrypted gpg key and the encrypted
password store in local storage.

So I managed to recover his data by writing a small script to recover the
key and encrypted text from his chrome's local storage and decrypt them.
Then I gave the plaintext to him, told him to change all of his passwords and
to use a password manager.
I gave him a new RPI and SD card (for 50€, he didn't argue, he had no choice.)
and set it back up this time including the backup solution [Encrypted tar.gz on
OneDrive {again, don't kill me, he insited on it}]. I made it clear to him that
his and the schools data was his responsibilty, not mine.

Part 1/2