4 ms·
I worked at a major global financial services firm. When I needed to have some maintenance work done on my company laptop, our IT guy came to my desk and asked
by version_five 5y ago
I worked at a major global financial services firm. When I needed to have some maintenance work done on my company laptop, our IT guy came to my desk and asked me to write my password on a post-it for him so he could access it. Security is a lot less secure than whoever wrote the policies might have thought
- Spivak 5y agoEh, unless your company’s threat model includes malicious IT workers it’s w/e in my book. I could just reset your password (and put the hashes back so you wouldn’t know) or keylog your machine. The whole reason you even have a password is to authenticate to my systems. If I can’t be trusted with it we’ve got bigger problems.
- version_five 5y agoYou think a company with 200k employees should have "IT" come around asking for laptops and passwords as SOP? What could possibly go wrong?