3 ms·

> You have likely confessed to a crime. What crime, exactly? I doubt what he did is any kind of crime. Honestly, some PMs would probably do the exact same th

by ardy42 6y ago

> You have likely confessed to a crime. What crime, exactly? I doubt what he did is any kind of crime. Honestly, some PMs would probably do the exact same thing (e.g. focusing on the "customer" by de-prioritizing "tech debt" to work on "higher priority" work). Edit: not to say it wasn't unethical, but the bar for criminal conduct is not the same.

kodah 6y ago
> Basically a startup I worked for 12 years ago were fucking me big time on compensation so I purposefully argued against encrypting the database knowing how shoddy their security was. I didn't allow ANYONE to secure the backend. 4 years later, their database gets leaked and they get "acquired" for an "undisclosed amount" which usually means they sold themselves at a huge discount pending lawsuits. I don't know, the act of confessing that it was done in bad faith? I have kept myself up late at night and in the early hours of the morning hoping that I made the right decisions in trade offs to protect my users, their data, and the company I worked for. I've worked for some companies that treated me pretty shitty. I've experienced racism, gas lighting, overworking, and being underpaid in my career. Never once did it occur to me to turn that hurt and frustration on the company or my users. This is possibly one of the strongest possible cases I have seen to professionalize software engineering. Holy smokes.
- mod 6y ago
  There isn't a very strong argument, then. You have an anonymous comment that claims to have caused a data beach of unknown data from an unknown company. No users are even mentioned. I feel like it's a strange thing to call out as a compelling argument.
  - ardy42 6y ago
    > You have an anonymous comment that claims to have caused a data beach of unknown data from an unknown company. No users are even mentioned. I don't think you can even call it that, since he didn't cause the breach. It's hard to even liken it any employee repeatedly and deliberately leaving the door to a store unlocked, which eventually gets robbed. Since I get the impression the stuff he's talking about would have probably been inside some kind of perimeter defense. IANAL, the best I can make of it from a legal perspective is some kind of negligence, but that's a tort, not a crime. So he may not have to worry so much about the RMCP, but rather losing his car to pay damages to his employer. I think there's a compelling argument for an ethical violation, but I'm still not seeing a criminal one.

by ardy42 6y ago

kodah 6y ago

> Basically a startup I worked for 12 years ago were fucking me big time on compensation so I purposefully argued against encrypting the database knowing how shoddy their security was. I didn't allow ANYONE to secure the backend. 4 years later, their database gets leaked and they get "acquired" for an "undisclosed amount" which usually means they sold themselves at a huge discount pending lawsuits. I don't know, the act of confessing that it was done in bad faith? I have kept myself up late at night and in the early hours of the morning hoping that I made the right decisions in trade offs to protect my users, their data, and the company I worked for. I've worked for some companies that treated me pretty shitty. I've experienced racism, gas lighting, overworking, and being underpaid in my career. Never once did it occur to me to turn that hurt and frustration on the company or my users. This is possibly one of the strongest possible cases I have seen to professionalize software engineering. Holy smokes.

mod 6y ago
There isn't a very strong argument, then. You have an anonymous comment that claims to have caused a data beach of unknown data from an unknown company. No users are even mentioned. I feel like it's a strange thing to call out as a compelling argument.
- ardy42 6y ago
  > You have an anonymous comment that claims to have caused a data beach of unknown data from an unknown company. No users are even mentioned. I don't think you can even call it that, since he didn't cause the breach. It's hard to even liken it any employee repeatedly and deliberately leaving the door to a store unlocked, which eventually gets robbed. Since I get the impression the stuff he's talking about would have probably been inside some kind of perimeter defense. IANAL, the best I can make of it from a legal perspective is some kind of negligence, but that's a tort, not a crime. So he may not have to worry so much about the RMCP, but rather losing his car to pay damages to his employer. I think there's a compelling argument for an ethical violation, but I'm still not seeing a criminal one.