News for hackers. Stuff that matters.
Re:Verelox Wiped by Ex-Admin by yardie on Friday June 09, 2017 @03:10PM (#14523642)
So in addition to the criminal side of things I guess the ex-admin wants to work in manual labor or fast food. There is no way in hell he'd have the references or pass the background.

BTW, we had a netadmin interview a few months ago. Guy was really smart, aced the technical and group interview. We were really looking forward to hiring him, and only needed to pass a background and reference check. HR told us in no uncertain terms to run the other way. They didn't share what was in his check but it wasn't good.

Re:Verelox Wiped by Ex-Admin by ugh123 on Friday June 09, 2017 @03:29PM (#14523775)
>They didn't share what was in his check but it wasn't good.

Always ask to see the background check details if you're the hiring manager (you should have the rights to see that despite what HR might tell you). Could be just a personal issue an HR employee might have with a former colleague. Or discrimination-based (happens).

Re:Verelox Wiped by Ex-Admin by Gibbon1 on Friday June 09, 2017 @05:29PM (#14524731)
Reminds me one of my old bosses hired someone. And then HR fired them because they had a pot conviction. So then my boss hired them as an outside contractor. Every six months HR would discover he was on the 'no hire list' and terminate his contract and my boss would cut him a new contract.
Re:Verelox Wiped by Ex-Admin by walshemj on Saturday June 10, 2017 @08:19AM (#14527071)
Reminds me when I worked a big telcom (BT) on of the guys in our section was an ex teenage Phreak and had been done for hacking PRESTEL.

One day one of the feared internal security team who had caught him years ago was in the building and met him and freaked out - our centre mangers politely told him to f off when he demanded that we fire the guy.

Re:Verelox Wiped by Ex-Admin by walshemj on Saturday June 10, 2017 @08:21AM (#14527078)
Was not the manger involved in the hearing in most big companies its the mangers who make the firing decision with input from HR.
Re:Verelox Wiped by Ex-Admin by pkaye on Saturday June 10, 2017 @12:22AM (#14526153)
HR doesn't need to approve of contractors?
Re:Verelox Wiped by Ex-Admin by valuearb on Saturday June 10, 2017 @01:33PM (#14528242)
In a good company, HR has as little authority as possible.
Re:Verelox Wiped by Ex-Admin by 65827 on Saturday June 10, 2017 @01:57PM (#14528335)
Yeah let me guess this dude was white. Unbelievable, the world must be so different in that skin.
Re:Verelox Wiped by Ex-Admin by Gibbon1 on Tuesday June 13, 2017 @01:13AM (#14542964)
My boss was French.

Socially Adept Frenchman: 1 Human Resources: 0

Re:Verelox Wiped by Ex-Admin by tptacek on Friday June 09, 2017 @05:16PM (#14524657)
I'm not sure what you're referring to. If you mean a formal background check, which summarizes your criminal history or your credit history, then candidates are entitled to copies of the specific report the company claims to rely on in taking an adverse action, but nothing else.

If you're referring to private reference checks, of the type that would surface "personal issues people might have with formal colleagues", you're not entitled to anything whatsoever.

If you're a hiring manager in an organization where HR handles background checks, you personally as the hiring manager are entitled to nothing. I would venture further that it's inappropriate for HR to provide criminal/credit background check information to hiring managers.

Re:Verelox Wiped by Ex-Admin by WhitneyLand on Friday June 09, 2017 @08:42PM (#14525599)
>you [as] the hiring manager are entitled to nothing

You mean in any kind of practical or legal sense or in your personal opinion?

I see this happen all the time and am not aware of any thing barring this in the U.S.

Think about the two extremes. If a startup of a few people run a background check there is no HR dept so the CEO/hiring manager is seeing it.

On the other hand if the hiring manager is the CEO at an F500 company trying to hire a handpicked rockstar exec and a background check pops there no way that person will be rejected only on the word of HR without understanding what the issue is and the context around it.

Somewhere in the middle of those extremes companies may have policies to address the situation, but I don't see how any blanket statement can be made here.

Re:Verelox Wiped by Ex-Admin by tptacek on Saturday June 10, 2017 @02:24AM (#14526375)
I asked the author what they meant, and then laid out what the facts are. It's simple:

* Candidates are entitled to copies of background/credit reports used to make adverse decisions against them, under the FCRA.

* Candidates are only entitled to the specific document, collected under the FCRA, that was used to make the adverse decision.

* Reference checks --- calls to previous employers and coworkers --- are not governed by the FCRA or, as far as I know, any other law. Candidates are absolutely not entitled to any information about reference checks, but a candidate that "flunks" a reference check might be told so when they're refused a job. Or they might not.

* No law entitles hiring managers to any documentation whatsoever.

Only the last point I made was one of opinion, but I think it's a widely held and pretty common sense opinion:

It is terribly inappropriate for HR to share background check documentation with hiring managers. Companies that employ background checks should have simple, static rules, like "no previously undisclosed felonies" or "no violations relevant to the job", that are evaluated by HR.

It's already a grave violation of candidate privacy to do these kinds of checks in the first place (which is why they have to collect special permission from candidates to do them at all!). It's negligent to then pass that information around the org chart to help others in the company read tea leaves from them.

My opinion here is informed by experience working with companies that do background checks, but I wouldn't be surprised to learn that there are fucked up companies where HR passes copies of credit and background reports to other employees.

Re:Verelox Wiped by Ex-Admin by justin66 on Saturday June 10, 2017 @11:49AM (#14527758)
> It's already a grave violation of candidate privacy to do these kinds of checks in the first place

True, but in general, it is likely that whatever a background check turns up on someone, such that they're unemployable, is probably available to anyone with a web browser and some time on their hands. The people in the org who want to satisfy their curiosity or sense of self importance as to why someone didn't meet the company's standards can probably find a way to do it.

The reason one really shouldn't what to see this info at all if they can help it (and should have a trustworthy HR office handle this stuff) is that pretty much everything done in the hiring process can be used later on in court. The safest possible position for a hiring manager if the question comes up is "HR indicated the candidate did not pass our background check and so we moved on." And only an idiot wants to answer questions later on about with whom they shared damaging information about a candidate.

Re:Verelox Wiped by Ex-Admin by WhitneyLand on Saturday June 10, 2017 @07:56AM (#14527025)
Well, the thing is sharing background issues is not limited to rogue or obscure companies. For example if you search the archives of WSJ it comes up reliably at some well known places.

To be clear I don't think a lot of this stuff is right. It drives me nuts to see someone ace technical interviews and then not be hired for some insignificant drug related issue. How do companies not realize this probably hurts them more than the candidate? A lot of tech companies don't do drug tests at all, I'm guessing because they've figured this part out.

Re:Verelox Wiped by Ex-Admin by walshemj on Saturday June 10, 2017 @08:05AM (#14527042)
Its not the law here HR is working for you as the hiring manger so dam right I want to see the docs - and BTW I have more experience in IR/HR issues than many junior HR.
Re:Verelox Wiped by Ex-Admin by valuearb on Saturday June 10, 2017 @01:47PM (#14528295)
HR is there to serve the organization, not the other way around.

If you are trying to hire a talented employee, and HR says no way, you better demand they justify it. It's your job to advocate for people on your team, even when they haven't come on board yet. Otherwise no one will.

It's far to easy for HR to auto-reject because of hard-wired criteria, they have no incentive to challenge their own rules for a good candidate.

I know a kid who once was a chip-runner at a casino. The way the job worked was he took cash/chips from poker players and went to the cage to get them chips/cash. He got paid minimum wage plus tips, and was on the hook if he got shorted. But the plus was he'd get $1 tip for each transaction, sometimes more.

But this kid optimized the whole job. He hustled like crazy, minimized cage trips by carrying 7 or 8 racks at a time, and even took optimal routes through the poker room. Watching him work was inspiring, the kid was so driven.

He was making a ton of money, far more than the other chip-runners, and someone ended up complaining. So the room decided chip-runners should pool all tips together. He quit in a rage the next day and chip-running service in the room became awful, the remaining chip-runners now saunter at their own pace, carry a single rack at a time and minimize their risk by slowly counting everything three times.

A couple years later the kid got busted for selling weed out of his house. He ended up serving a few years in prison. He's going to now fail any HR background check/screen. I'd still hire him in a fucking second, and expect him to rapidly work his way up from any entry level role.

Re:Verelox Wiped by Ex-Admin by pvg on Saturday June 10, 2017 @07:11PM (#14529727)
One of the reasons I doubt any sane HR department would hand a hiring manager the results of something like a criminal background check is precisely to protect the organization.
Re:Verelox Wiped by Ex-Admin by yardie on Friday June 09, 2017 @03:33PM (#14523817)
Didn't know I could do that.

I've had my own background checks in the past and no one has shared them with me. Speaking to HR, unless there is a negative item on your record they aren't required to.

Re:Verelox Wiped by Ex-Admin by Ralfp on Friday June 09, 2017 @06:04PM (#14524955)
In EU even something like recruiter scribbling notes over your printed CV during job interview automatically grants you right to look into them as it is considered personal data processing.
Re:Verelox Wiped by Ex-Admin by marzell on Friday June 09, 2017 @03:37PM (#14523838)
If the background check was done on you, I believe they have to provide a copy of all the data they received if you request it.
Re:Verelox Wiped by Ex-Admin by pionar on Saturday June 10, 2017 @07:48AM (#14527015)
At least at the federal level, no they don't. Unless they decided not to hire you (or fired you afterwards). Then they only have to provide "a notice that includes a copy of the consumer report you relied on to make your decision" - https://www.eeoc.gov/eeoc/publications/background_checks_emp...
Re:Verelox Wiped by Ex-Admin by yardie on Saturday June 10, 2017 @01:50PM (#14528302)
I've requested it, just for my own amusement. They told me no. Unless they didn't hire me based on something from that background check they didn't have to give it to you.
Re:Verelox Wiped by Ex-Admin by twohlix_ on Friday June 09, 2017 @04:46PM (#14524417)
Depends on the state.
Re:Verelox Wiped by Ex-Admin by PhasmaFelis on Friday June 09, 2017 @03:53PM (#14523967)
> Didn't know I could do that.

o_O

Why would you assume you couldn't?

Re:Verelox Wiped by Ex-Admin by cperciva on Saturday June 10, 2017 @10:18AM (#14527409)
Discrimination is exactly why you want to leave that decision in the hands of HR. In the event of a lawsuit they'll have evidence to show that they followed the process your lawyers signed off upon and the decision to say "no hire" was based solely on permissible factors. At large companies, this will go as far as "here's a database dump of all the applicants with X on their criminal record... as you can see, we didn't hire any of them".

As soon as individual managers want to make those decisions for themselves, it becomes much harder to refute claims of discrimination.

Re:Verelox Wiped by Ex-Admin by valuearb on Saturday June 10, 2017 @01:54PM (#14528326)
That's a terrible policy. You need to optimize for getting the best employees, not minimizing discrimination complaints. How often is a felon going to sue because the company once made an exception for a specific felon because of specific outside factors, and how can that cost you any suit?

"Your honor, my client, the recently released child rapist with an iffy work record, is suing because BigCorp says they normally don't hire felons, but a few years ago BigCorp made an exception for a felon who sold marijuana, got his college degree in prison, then after he was released worked at non-profits helping the poor while getting an advanced degree in computer technology and writing several highly regarded academic papers on improving user interfaces for the disabled. That's not fair!"

The specific facts matter, and HR should be fired if they have blanket polices that ignore them. HR needs to serve the business, not the other way round.

Re:Verelox Wiped by Ex-Admin by 1024core on Saturday June 10, 2017 @01:26AM (#14526274)
I had a manager who was consistently underpaying me, significantly. When I quit in disgust, he threatened me that he'd make sure I never got another job. He had been milking my success to get lots of bonuses and raises for himself, even though I did absolutely all of the work and he just "managed" (which meant, ignored me completely). So he wasn't happy that I was quitting, and though he could bully me. Luckily for me, I didn't have to use him as a reference, as 2 other PMs agreed to vouch for me.

So, just because a guy has a bad reference it does not mean that he's necessarily bad.

Re:Verelox Wiped by Ex-Admin by mb_72 on Saturday June 10, 2017 @06:21AM (#14526837)
"So, just because a guy has a bad reference it does not mean that he's necessarily bad."

This is so true. Years ago I was brought into a company specifically to improve their software quality process, but without being aware one of the company owners (of which there was two) was against be being employed for that purpose. I uncovered a lot of incompetence and outright corruption with some employees. The 'good' owner went on stress leave, and then pressure was brought to bear on me, resulting in me quitting on the spot one Monday morning; not my proudest moment, but I couldn't take the pressure any more, and my ally was no-where to be seen. Fast forward a decade, and I interviewed with someone who used to work at the same company; it turns out that my leaving had been framed as 'fired for incompetence', and word had been put around part of the local industry that I was hard to work with, unreliable, bad at my job etc. I laugh about it now, but at the time it really bothered me about the possible damage done to my career and reputation.

Re:Verelox Wiped by Ex-Admin by morganvachon on Saturday June 10, 2017 @12:10PM (#14527833)
First, I'm not a lawyer and this is not legal advice, just my own limited knowledge and experience.

I don't know what country you're in so I won't speculate on what's legal or not in your area, but here in the U.S. it's illegal for a prior employer to provide false information to a prospective new employer during a background/reference check. If your former boss tried to blacklist you like that, he'd put his company at risk for a civil suit. And, while it's not illegal to truthfully say that a current or former employee is a bad employee, doing so rides the thin line of opening the company up to a libel lawsuit.

Generally speaking, a company might "dish the dirt" on a former employee if there are criminal charges to back up the claims. Even then, legal and HR will likely frown upon it. Usually, when the new company calls the old company for a reference, the old company will say something like "Yes, $employee worked here from $startDate to $endDate" and refuse to divulge any other information in order to avoid any semblance of libel.

Once again, this is my limited experience in SMB and government settings, I have no experience in mid-to-large businesses, Fortune 500 companies, and Silicon Valley startups. We've all heard stories about managers at such companies going around HR and discussing potential hires at the bar or on the golf course.

Re:Verelox Wiped by Ex-Admin by 1024core on Saturday June 10, 2017 @05:32PM (#14529303)
I am actually in the US. On paper, suing the ex-employer sounds nice; but who's going to put bread on the table while the lawsuit works its way through the courts? Who'll pay the lawyer? And how can an individual compete against a company with billions in revenue??
Re:Verelox Wiped by Ex-Admin by alt2319 on Friday June 09, 2017 @10:51PM (#14525912)
> I guess the ex-admin wants to work in manual labor or fast food

You'd be surprised. I did something somewhat similar and was convicted of a federal felony. No fast food place or retailer would touch me with that record. But ironically I've found plenty of IT work with smaller companies.

Re:Verelox Wiped by Ex-Admin by douche on Friday June 09, 2017 @11:50PM (#14526073)
Ironically, we are much laxer on those with more responsibility. When was the last time a middle manager or senior executive had to pass a piss test to be employed? It's routine in blue collar work.
Re:Verelox Wiped by Ex-Admin by dataminded on Saturday June 10, 2017 @12:06AM (#14526119)
That's a vertical thing. I've had two financial services employers require a drug test.
Re:Verelox Wiped by Ex-Admin by jon-wood on Saturday June 10, 2017 @04:39AM (#14526633)
Do they fire you if you're not testing positive for cocaine?
Re:Verelox Wiped by Ex-Admin by nickpsecurity on Saturday June 10, 2017 @11:54AM (#14527777)
Not in Wall St for sure. Or they make sure the "right people" know it's coming ahead of time so they can buy the right stuff to cheat the tests. Plenty of drug use by managers in a lot of organizations I've been involved in. None were ever fired for it. A few were fired for the damaging behavior that resulted from it.
Re:Verelox Wiped by Ex-Admin by Stratoscope on Saturday June 10, 2017 @02:35PM (#14528530)
You missed a word in jon-wood's comment (emphasis added):

> Do they fire you if you're not testing positive for cocaine?

Re:Verelox Wiped by Ex-Admin by nickpsecurity on Saturday June 10, 2017 @11:37PM (#14530479)
Glossed over it. Good catch. Interesting enough, my post still is pretty accurate reply if you drop the "not" at the beginning and look at it from who gets ahead in their special clubs.
Re:Verelox Wiped by Ex-Admin by cbsmith on Saturday June 10, 2017 @12:50AM (#14526211)
> HR told us in no uncertain terms to run the other way. They didn't share what was in his check but it wasn't good.

I always have a hard time with those contexts. HR sometimes has the wrong idea of what is unacceptable and what is appropriate. There really isn't a good reason for them not to tell you. The only thing that would make sense is if they shouldn't know it.

Re:Verelox Wiped by Ex-Admin by MichaelGG on Friday June 09, 2017 @08:02PM (#14525463)
He had the references to get hired at this job, right? So just leave the job you screwed off the resume.

A similar thing happened to a client. Sysadmin logged into GCP and Azure immediately after termination and just deleted everything. He was in the UK, we were in the US. Wasn't worth it to try to get someone to prosecute, and I'm sure we're not listed as references.

Did get people motivated for a multifactor delete bucket for extra backups.

Re:Verelox Wiped by Ex-Admin by whalesalad on Friday June 09, 2017 @03:23PM (#14523732)
We hired a guy once who, a few weeks after starting, had to take three weeks off to serve jail time for his 3rd DUI. Good times.
Re:Verelox Wiped by Ex-Admin by Spooky23 on Friday June 09, 2017 @08:03PM (#14525467)
I had a retail customer once (I sold pc stuff to SMBs in college) who made a big purchase via credit card. The cashier got a weird code, and got transferred to a person who asked for a supervisor (me), and then asked yes/no questions about the physical description of the guy. Then they gave me some code to clear the transaction.

I was checking out the Sunday paper a few days later (this was the 90s), and it turned out that the guy was a fugitive who basically killed his wife and fed her to the fishes.

Pretty freaky stuff.

Re:Verelox Wiped by Ex-Admin by vkou on Friday June 09, 2017 @04:40PM (#14524365)
A little bit off-topic, but stories like this lead me to wonder why mandated ignition locks are not more prevalent.
Re:Verelox Wiped by Ex-Admin by beat on Friday June 09, 2017 @05:39PM (#14524810)
I once saw a pitch for Google VC by a company selling mandated breathalyzer ignition locks - and insurance. The founders were a criminal lawyer and an insurance salesman (brothers). Their angle was to get state legislation passed, and win per-state government monopolies on the interlocks - and then cross-market auto insurance to drivers who had to buy the interlocks, because most carriers won't insure drivers after a DUI.

It was the creepiest, most cynical thing I've ever seen.

Those guys are gonna be RICH.

Re:Verelox Wiped by Ex-Admin by bm1362 on Saturday June 10, 2017 @09:32AM (#14527248)
That's interesting. You can read it a few ways, one sounds like a company tailored to the problems of being a post-DUI offender. If the traditional systems fail you and you need a vehicle for transportation this might be a solution. The other is a company that has a captive market and squeezes them like the rest of the justice economy.
Re:Verelox Wiped by Ex-Admin by Dylan16807 on Saturday June 10, 2017 @11:26AM (#14527670)
It's not really two ways of reading an action. It's two separate actions. One is providing insurance to people with interlocks. The other is using a monopoly to promote that insurance.
Re:Verelox Wiped by Ex-Admin by nickpsecurity on Saturday June 10, 2017 @11:57AM (#14527785)
In oligopoly form, it's exactly what the car insurance companies did paying off legislators to require their product, setting the standards for how the insurance is supposed to be done, selling that now-mandated product at nice profits, and then municipalities and states making nice profits off the tickets and fines (esp off poor people).
Re:Verelox Wiped by Ex-Admin by jo909 on Friday June 09, 2017 @04:49PM (#14524431)
And then we add a mandatory breathalyzer check to the remote VPN login. Because if people believe they can still drive, they might just believe they can still answer the pager.
Re:Verelox Wiped by Ex-Admin by madamelic on Friday June 09, 2017 @05:36PM (#14524783)
YOLO is not really a phrase you should use on-call. :)
Re:Verelox Wiped by Ex-Admin by zhengyi13 on Friday June 09, 2017 @08:37PM (#14525588)
Every time I've seen them discussed, I see brought up that they're not especially reliable.

Denying transport to someone who's got a history of doing anti-social things behind the wheel seems reasonable. But making them required for all vehicles (if I'm understanding your intention correctly) seems likely to have undesirable results.

Re:Verelox Wiped by Ex-Admin by seanp2k2 on Friday June 09, 2017 @10:29PM (#14525868)
FWIW Toyota had a drunkenness-sensing steering wheel at least in concept for ~10 years ago: http://www.autoblog.com/2007/01/03/toyotas-sweat-sensing-ste...
Re:Verelox Wiped by Ex-Admin by ubernostrum on Saturday June 10, 2017 @03:25AM (#14526485)
Breath tests are notoriously unreliable/inaccurate, to such a degree that in some jurisdictions the law is now phrased entirely in terms of a machine reading since it's been established there's no reliable relationship between the machine reading and blood alcohol level.

Seriously, read up on the history of breath-test machines sometime. Everything from difficult chemistry to literal "oops we misplaced a decimal point in the software".

Re:Verelox Wiped by Ex-Admin by lancewiggs on Saturday June 10, 2017 @05:32AM (#14526745)
Not for evidential breath testers used here by police in NZ. The blood tests always back up the breath test, and have done so for years.
Re:Verelox Wiped by Ex-Admin by loeg on Friday June 09, 2017 @09:28PM (#14525717)
They're very expensive and they're not especially reliable.
Re:Verelox Wiped by Ex-Admin by douche on Friday June 09, 2017 @11:53PM (#14526080)
Like, stupid expensive. Kids, don't ever put yourself in that situation. Call an uber/lyft/whatever.
Re:Verelox Wiped by Ex-Admin by loeg on Saturday June 10, 2017 @12:16AM (#14526135)
Yeah, it's a seller's market. If you get a DUI and have to drive to get to work, you have to pay it. And the public is (understandably) largely unsympathetic to extraneous costs for drunk drivers.
Re:Verelox Wiped by Ex-Admin by moron4hire on Saturday June 10, 2017 @12:03AM (#14526109)
There were a few guys at the bar I used to hang out at that had several DUIs, had the ignition lock, yet somehow seemed to get on the road after closing the bar.
Re:Verelox Wiped by Ex-Admin by valuearb on Saturday June 10, 2017 @01:57PM (#14528337)
"We hired a guy once who, a few weeks after starting, had to take three weeks off to serve jail time for his 3rd DUI'

You flunked your own background check.

Re:Verelox Wiped by Ex-Admin by therealmarv on Saturday June 10, 2017 @11:27AM (#14527675)
Is this deep background check again a US thing? In Germany it's even unlawful to ask potential employees if they are pregnant. It's essentially discrimination. Maybe some HR will check your social media accounts and search on Google for you but generally police records (at least my experience in IT) or even health records are not requested (or against law!) unless it's a high responsive job like e.g. becoming a police officer or maybe military.
Re:Verelox Wiped by Ex-Admin by Zak on Saturday June 10, 2017 @11:37AM (#14527708)
Asking potential employees if they are pregnant, married, plan to become pregnant, have children already, etc... is illegal under US law as well. Common German practices like asking for a photograph on an application or CV or asking about a prospective employee's religion are also usually illegal in the US, as it's pretty hard to think of non-discriminatory reasons an employer would need that information.

Asking previous employers about their experience with an employee, however is not illegal. It's usually not illegal for them to say something negative if it's true, though some businesses are conservative about what they will say out of fear of being sued for slander. Accessing public court records or news stories about criminal cases and using that information for employment purposes is usually not illegal. Asking prospective employees if they've been convicted of serious crimes is usually not illegal.

Re:Verelox Wiped by Ex-Admin by germanier on Saturday June 10, 2017 @01:54PM (#14528327)
Who asks for a prospective employee's religion in Germany? Apart from church affiliated positions this is illegal here as well.
Re:Verelox Wiped by Ex-Admin by Zak on Saturday June 10, 2017 @02:45PM (#14528596)
I think I may have confused it with Ireland or Northern Ireland where there's a legal mandate to keep track of it for anti-discrimination reporting.

It does seem to be conventional to include one's photograph, age, sex, marital status, children or lack thereof and place of birth on a CV in Germany. It's not clear to me if it's actually problematic to exclude those, but it's my impression that not following conventions tends to not go over especially well in Germany.

Re:Verelox Wiped by Ex-Admin by germanier on Saturday June 10, 2017 @06:47PM (#14529638)
I even remember learning to include my parent's jobs on a CV but thankfully that is gone for good. The things you listed are still common with variations depending on the industry. More often than not you can exclude them without negative effects but sometimes those are still seen as important information.
Re:Verelox Wiped by Ex-Admin by walshemj on Saturday June 10, 2017 @01:59PM (#14528353)
And many responsible HR people don't look at peoples sm accounts for the same reason they dnt ask for a photograph
Re:Verelox Wiped by Ex-Admin by stormking on Sunday June 11, 2017 @07:34PM (#14534394)
What are you talking about? At all (german) companies I ever worked at is was common to request a "Polizeiliches Führungszeugnis" (essentially police records or the lack of such) first thing during the trial period. This is absolutely common, maybe you just forgot about that?
Re:Verelox Wiped by Ex-Admin by germanier on Monday June 12, 2017 @08:53AM (#14536922)
Not sure at which companies you worked at but outside certain fields it is not common and actually illegal as the Führungszeugnis may contain entries irrelevant to the job. Exceptions include working with children/youth, public officials, security guards, insurance, and some positions in the field of logistics.
Re:Verelox Wiped by Ex-Admin by therealmarv on Monday June 12, 2017 @03:51AM (#14535715)
Common?? Maybe it is more and more common but it never happened to me in my professional career.
Re:Verelox Wiped by Ex-Admin by redm on Friday June 09, 2017 @03:46PM (#14523906)
I've encountered many companies that are scared of lawsuits from bad references so responses, mandated by HR, are often limited to employment dates, and other very generic information. The mentality is, that person isn't our problem anymore, let someone else deal with them.
Re:Verelox Wiped by Ex-Admin by damm on Friday June 09, 2017 @04:23PM (#14524229)
On this case the person's problem is law enforcement. Basically they just need to pass off details to the FBI / local police and have the ex-admin arrested and put on trial. What he did was a crime

If a company walks away from this and doesn't take legal action; they should themselves get sued by their customers.

Destroying company property is a crime; wether it's defacing a website or ... it's not your property; you are just hired to maintain it (in one shape or another)

Re:Verelox Wiped by Ex-Admin by rurban on Friday June 09, 2017 @05:13PM (#14524634)
They are based in The Hague Netherlands, so they don't want call the FBI for sure.
Re:Verelox Wiped by Ex-Admin by dsacco on Saturday June 10, 2017 @01:11AM (#14526248)
Why didn't you ask to see details from HR? There's no transparency in their decision making - how do you know he was turned away for a good reason?
Re:Verelox Wiped by Ex-Admin by Ensorceled on Saturday June 10, 2017 @07:25AM (#14526963)
HR's view point is that the candidate has a right to privacy and their personal problems are none of the hiring manager's business.
Re:Verelox Wiped by Ex-Admin by valuearb on Saturday June 10, 2017 @02:00PM (#14528357)
Any HR manager with that viewpoint should be fired on the spot. They work for the hiring manager. The hiring manager is the only advocate the candidate has, certainly not HR which will only cover their own ass.
Re:Verelox Wiped by Ex-Admin by damm on Friday June 09, 2017 @03:45PM (#14523903)
Background checks don't stop things like this. The problem is you have to hire trustworthy people in these positions.

Regardless of what crime they may (or may not) have made; you are looking for the person and what they do. Not what they did.

This is a common problem; we look at the past a bias of the future. Life only works out that way if the person is too unwilling to change; and that again is something you should look for in the hiring process.

Lastly; hiring ex-hackers isn't a bad thing. Caring about a background check when hiring an ethical hacker or someone who turned their life around; only shames them and pushes them back where they came.

So be careful or you only end up criminalizing being a criminal.

Re:Verelox Wiped by Ex-Admin by yardie on Friday June 09, 2017 @08:07PM (#14525480)
Sorry. If someone intentionally destroys company property I would want nothing to do with them, ever. This isn't a simple b&e where the perp rarely knows the victim. He was given the tools to do his job and intentionally used them to undermine his company and colleagues.

Also, he is not a hacker, just an asshole. Having the admin login and password doesn't make you elite. The only weakness he exploited was himself.

Re:Verelox Wiped by Ex-Admin by damm on Sunday June 11, 2017 @02:22AM (#14530927)
Being a criminal or commiting a crime has nothing to do with destroying company property. That's the problem with asking for people's background.

What they did; and more importantly have they recovered and not commited another crime of similar circumstances.

P.S. I knew a kid when I was younger who helped an ISP start up in Colorado Springs in the late 90's... he got fired and he hacked them and spent 6months in jail; eventually they re-hired him after he got out of jail only for a repeat offense.

There is a point; he did it twice. The first time they could pass it off as they didn't know; the second time they hired him they were legally liable.

So this gentleman should spend some time in jail for what he did.

Re:Verelox Wiped by Ex-Admin by mdekkers on Friday June 09, 2017 @09:12PM (#14525681)
The problem is you have to hire trustworthy people in these positions

Yeah, that. Also, secure backups and compartmentalized systems and data access.

Re:Verelox Wiped by Ex-Admin by damm on Sunday June 11, 2017 @02:23AM (#14530930)
Secure backups where the admin doesn't have access to. As someone who runs servers for a living I don't have a problem with this.

Automated tools may need to delete and list; but heck off site secure backups are an amazing thing.