3 ms·

Not sure if the devices are laptops or phones, so assume $400/device and $50/hour time, that's about a $700,000 dollars. "If you had simply spent nearly three

Not sure if the devices are laptops or phones, so assume $400/device and $50/hour time, that's about a $700,000 dollars. "If you had simply spent nearly three quarters of a million dollars of your own money, done 40 weeks of volunteer overtime on top of your normal job, without any purchase approval, without the authority to do that, and no guarantee of seeing that money back, this wouldn't have been a problem, so fuck you" is a terrible take all around. > "What I don't hear is "why can't they upgrade, and how can we help them upgrade"" We know why they can't upgrade, because the departments responsible for purchasing the upgrades won't agree to spend the money. This isn't something which can be helped by more technical input. > "Finger pointing at compliance is a bit mendacious" "mendacious: not telling the truth; lying." - nope, wrong. Legal and Compliance say it must be done and you must do it, and have the authority to do that. Pointing fingers at them is honest and appropriate, that is where the instruction is coming from (legal) and the reason why the instruction exists (compliance with internal or external regulations).

iso1631 4y ago
Except the tale all falls apart when the service desk had no idea this was going to happen Clearly the compliance team (or whoever is implementing it) has failed in its communication
- AtlasBarfed 4y ago
  I'm not saying the guy is the second coming of Hitler. I mean is it his job to care? Not really. Is the absurdity humorous? Maybe he communicated it wrong? It's twitter. It's more that security teams tend to have uncooperative, aggressive, authoritatian, and punative dispositions. I think ye old security industry had its roots in three letter government agencies which are used to conformance, policy hammers, and enemies of the state. But when you add that to an organization already rife with infighting, dissatisfaction, and frustration, it will just lead to more resentment and your employees become your enemies. The biggest security threats these days aren't leet hackers exploiting 0days, or even the county password inspector conning his way in. It's overworked angry pissed off employees leaving the door open. It's like Princess Leia said: the tighter you squeeze, the more people you lose.

iso1631 4y ago

Except the tale all falls apart when the service desk had no idea this was going to happen Clearly the compliance team (or whoever is implementing it) has failed in its communication

AtlasBarfed 4y ago
I'm not saying the guy is the second coming of Hitler. I mean is it his job to care? Not really. Is the absurdity humorous? Maybe he communicated it wrong? It's twitter. It's more that security teams tend to have uncooperative, aggressive, authoritatian, and punative dispositions. I think ye old security industry had its roots in three letter government agencies which are used to conformance, policy hammers, and enemies of the state. But when you add that to an organization already rife with infighting, dissatisfaction, and frustration, it will just lead to more resentment and your employees become your enemies. The biggest security threats these days aren't leet hackers exploiting 0days, or even the county password inspector conning his way in. It's overworked angry pissed off employees leaving the door open. It's like Princess Leia said: the tighter you squeeze, the more people you lose.