3 ms·
Anonymously heads-up the country-level information security officer of the bank in question with a link to the Github repo. CC the country head. Working on co
by zhte415 10y ago
Anonymously heads-up the country-level information security officer of the bank in question with a link to the Github repo. CC the country head.
Working on code without security background checking confirmed is an absolute no.
This will completely torpedo your employer, but that might not be so bad if this is their attitude to information security.
Edit: As anonymous as you can. Have a lawyer present. Don't take advice from the internet like it is legal opinion.
- AussieOdyssey 10y agoThe consultant is running wireless hotspots to copy the software. All I want is the contract money they agreed to pay me for this project. They froze the payment because I complained about this, at best unethical, behaviour.
- evgen 10y agoYou will need a lawyer to determine your own liability here, to determine the best path to report this to the bank, and to check your contract to see how you can force the payment to be delivered. Save any and all communication between you and the contracting firm, ideally on a device that they do not control, and don't communicate in any way that can't be recorded for your own protection. Once things reach this stage you need a lawyer
- bitJericho 10y agoYou're not getting paid until you break the law.
- marcosdumay 10y agoGet a lawyer and another job. Putting that data on GitHub may not be a crime, but what they are doing to you may be one.