3 ms·

I've heard that the culture of some workplaces can even encourage this, as there is training value for developing good habits (though I haven't been at an organ

I've heard that the culture of some workplaces can even encourage this, as there is training value for developing good habits (though I haven't been at an organization like this myself). The idea is that users are trained and regularly reminded to always lock their computers when they step away for cybersecurity. So, if they forget, their computer is relatively harmlessly messed with (like with changing the desktop background). The consequences are then trivial, in contrast to potentially severe if a person left their computer unlocked with unvetted people coming in and out of the office during an event, or if they left their laptop unattended in a public area.

sfn42 3y ago
I work at a fairly large firm where we do this. If you leave your computer unlocked it won't be long before "you" announce in the company slack that you'll bring cake on Friday. Or something like that. Some people still leave their computers unlocked somewhat frequently, but overall I think it works.
- jeffreygoesto 3y ago
  Similar here. We are really trained to lock when leaving the machine. One co-worker when pressed into coming with us for lunch did it blindly and after some seconds and finally a glance at the screen wondered why the lock screen did not come up. He accidentally had pressed shift-delete instead. On the folder he had worked on without committing the whole day. m(
  - pests 3y ago
    I have been locking my computers by habit since I was a child. To this day I will lock before walking away to even use the bathroom in a house alone. I even noticed this locking behavior a few weeks ago and chuckled at myself. That Windows+L motion as I get up is just so ingrained. If I'm not actively in front of my PC it is always locked.
DylanSp 3y ago
The team at my first tech job did this; I left my computer unlocked and stepped away, came back to find "I" had sent a joking message to the team saying that I forgot to lock my computer. It definitely trained that habit into me, I lock my desktop when stepping away even at home. I think it's probably a good technique, though it needs to be done with a bit of care to not seem too hostile or humiliating. Changing the desktop background seems like a good idea, since it's harmless, obvious to the user, easily fixed, and doesn't impede actual work.
jerezzprime 3y ago
I worked on a team where, if you left your computer unlocked, someone would send an email (from your email) to the rest of the team letting everyone know you were bringing donuts for everyone the next day. You learn a lesson, and the team gets a treat.
averageRoyalty 3y ago
This is exactly what we did and why we did it in the early 2000s. The company (of about 700 people) standard was "baggy pantsing"[0]. Of course there was etiquitte. You only ever emailed smaller groups (your team, your floor, rtc) - never all staff. You always explained to a newbie so they didn't feel too embarassed or singled out - and they always got a heads up during training. Our small team of 15 got pretty crazy though. Rebinding keys, replacing all the icons with My Little Pony or Hello Kitty custom sets, etc. It became a good competition and a great way to blow off steam in a high output role, and as a byproduct built in good physical security. 0. https://securityintelligence.com/dont-get-pantsed-embrace-a-culture-of-cybersecurity-with-greater-security-awareness/ https://securityintelligence.com/dont-get-pantsed-embrace-a-...

sfn42 3y ago

I work at a fairly large firm where we do this. If you leave your computer unlocked it won't be long before "you" announce in the company slack that you'll bring cake on Friday. Or something like that. Some people still leave their computers unlocked somewhat frequently, but overall I think it works.

jeffreygoesto 3y ago
Similar here. We are really trained to lock when leaving the machine. One co-worker when pressed into coming with us for lunch did it blindly and after some seconds and finally a glance at the screen wondered why the lock screen did not come up. He accidentally had pressed shift-delete instead. On the folder he had worked on without committing the whole day. m(
- pests 3y ago
  I have been locking my computers by habit since I was a child. To this day I will lock before walking away to even use the bathroom in a house alone. I even noticed this locking behavior a few weeks ago and chuckled at myself. That Windows+L motion as I get up is just so ingrained. If I'm not actively in front of my PC it is always locked.

DylanSp 3y ago

The team at my first tech job did this; I left my computer unlocked and stepped away, came back to find "I" had sent a joking message to the team saying that I forgot to lock my computer. It definitely trained that habit into me, I lock my desktop when stepping away even at home. I think it's probably a good technique, though it needs to be done with a bit of care to not seem too hostile or humiliating. Changing the desktop background seems like a good idea, since it's harmless, obvious to the user, easily fixed, and doesn't impede actual work.

jerezzprime 3y ago

I worked on a team where, if you left your computer unlocked, someone would send an email (from your email) to the rest of the team letting everyone know you were bringing donuts for everyone the next day. You learn a lesson, and the team gets a treat.

averageRoyalty 3y ago

This is exactly what we did and why we did it in the early 2000s. The company (of about 700 people) standard was "baggy pantsing"[0]. Of course there was etiquitte. You only ever emailed smaller groups (your team, your floor, rtc) - never all staff. You always explained to a newbie so they didn't feel too embarassed or singled out - and they always got a heads up during training. Our small team of 15 got pretty crazy though. Rebinding keys, replacing all the icons with My Little Pony or Hello Kitty custom sets, etc. It became a good competition and a great way to blow off steam in a high output role, and as a byproduct built in good physical security. 0. https://securityintelligence.com/dont-get-pantsed-embrace-a-culture-of-cybersecurity-with-greater-security-awareness/ https://securityintelligence.com/dont-get-pantsed-embrace-a-...