A programmer automated their data-entry job. Now: tell their employer?

Re:A programmer automated their data-entry job. Now: tell th... by partisan on Saturday July 01, 2017 @10:46AM (#14677324)

When I automated the documentation of nightly job processes using Tivoli Maestro configuration files and Visio, my employer didn't know what to do with me so they promoted me. It never crossed my mind not to say something. I wasn't there to produce output. I was there to bring value to the organization.

At another employer, I worked alongside a customer service rep who automated much of the time consuming work he had to do. He wasn't a programmer by trade, but having a hacker mindset, he learned to do so after tiring of the same old work. Despite the annoyance of the security team and other developers who felt threatened by his work, he was promoted to IT and they locked down the workstations so it wouldn't happen again.

[ Parent | on HN ]

Re:A programmer automated their data-entry job. Now: tell th... by patcheudor on Saturday July 01, 2017 @10:57AM (#14677374)

> Despite the annoyance of the security team and other developers who felt threatened by his work

Depending on what he did the security team may have rightfully had issues with the work. I've seen it time and time again. Someone automates something, the tool gets released to users and it's full of SQLi, XSS, and RCE vulnerabilities, sometimes opening up a once protected data-set or systems to company or Internet wide exposure. It's shadow IT/Dev work like this which tends to be responsible for the most security incidents.

[ Parent | on HN ]

Re:A programmer automated their data-entry job. Now: tell th... by austinshea on Saturday July 01, 2017 @11:11AM (#14677429)

> It's shadow IT/Dev work like this which tends to be responsible for the most security incidents.

Most security incidents? Sounds unsubstantiated.

[ Parent | on HN ]