4 ms·

I'm very curious at to what happened next. How did the conversation go with the dev and did they get to keep their job?

• 0xbadcafebee 5y ago
  I didn't tell his boss. I did tell my boss, in an e-mail with evidence. We both had a little chat with the dev where we made it clear that if this happened under slightly different circumstances (if he was trying to access data/systems he wasn't supposed to, if it was one of the HIPAA accounts, etc) he'd not only be shitcanned, he'd be facing serious legal consequences. We were satisfied by his reaction and didn't push it further. I was actually fired early in my career as a contractor when an over-zealous security big-wig decided to go over my boss's boss's head. I had punched a hole in the firewall to look at Reddit, and because I also had a lot of access, this meant I wasn't trustworthy and had to go. People (like me) make stupid mistakes; we should give them a second chance.
  • maestrae 5y ago
    Thanks for sharing, i think how you handled it was quite compassionate. if i ever run into this situation, i have a playbook.