News for hackers. Stuff that matters.
Re:SaaS CTO Security Checklist by Eldt on Thursday May 30, 2019 @05:02PM (#20055883)
"At Sqreen, for example, if someone catches another person’s laptop unlocked while they’re AFK, they can type “Cookies!” in that person’s Slack. That person will then have to bring in cookies for the office!"

This sounds like a fun idea, but has anyone ever refused to bring in cookies?

Re:SaaS CTO Security Checklist by LandR on Thursday May 30, 2019 @06:03PM (#20056367)
We would send emails to the office from unlocked machines.

e.g, long detailed emails about my little pony and asking to start a company My Little Pony fanclub.

Or similar for Celine Dion etc.

Change their wallpaper to something embarrasing, or their homepage etc.

Or just send out an email to everyone in the company saying how much you love everyone, and how lucky you feel to work with such lovely people xxx

Re:SaaS CTO Security Checklist by badpizza on Thursday May 30, 2019 @05:21PM (#20056026)
In my experience, when someone refused was because he/she forgot to bring the reward. Some time ago, before Slack, we used to type "donuts" in the email's composer and send the message to the team's mailing list or to the full office.

Imagine your co-worker on the next day with two or three dozens of Krispy Kreme products.

Re:SaaS CTO Security Checklist by okusername on Thursday May 30, 2019 @05:20PM (#20056024)
I don't think you can enforce this, would be horrible for morale and probably illegal. I like to have similar "punishments" in my teams, people generally have fun with it. (And the rules apply to me too of course) But if someone doesn't want to, they can just ignore it. (Usually 1 in 10-20)
Re:SaaS CTO Security Checklist by dgrove on Thursday May 30, 2019 @08:30PM (#20057254)
Multiple teams I've been on at multiple companies have done this process, but with donuts and other foods. A little bit of public shame goes a long way.
Re:SaaS CTO Security Checklist by paulb81 on Thursday May 30, 2019 @05:09PM (#20055941)
As our team is growing, having to bring cookies for a larger group can be a lot. Also, you're a bit less inclined if this happens to you two days in a row...

(message for Tyler: we're still waiting on those cookies)

Re:SaaS CTO Security Checklist by trulyrandom on Thursday May 30, 2019 @05:08PM (#20055928)
This is exactly what the team I'm in does as well. It's fun, and people actually learn to lock their machines as a routine pretty quickly.
Re:SaaS CTO Security Checklist by jdreyfuss on Thursday May 30, 2019 @06:02PM (#20056363)
It's not something we hardcore enforce, since it's more about having a fun way to build good security habits with your devices. Being lightly called out in Slack has an impact in and of itself. The actual cookies are just a bonus. But people do like cookies, so there is some social pressure from your peers asking when the cookies are coming!
Re:SaaS CTO Security Checklist by SmokeGS on Thursday May 30, 2019 @05:03PM (#20055892)
I'd be more inclined to do a "drinks" option.
Re:SaaS CTO Security Checklist by loco5niner on Thursday May 30, 2019 @05:12PM (#20055962)
Except for those that obstain. Of course, not all people can eat cookies either, I suppose.
Re:SaaS CTO Security Checklist by SmokeGS on Thursday May 30, 2019 @05:40PM (#20056170)
It doesn't even have to be alcoholic drinks
Re:SaaS CTO Security Checklist by saagarjha on Friday May 31, 2019 @12:52AM (#20058313)
Psst…I think you meant "abstain".
Re:SaaS CTO Security Checklist by loco5niner on Friday May 31, 2019 @09:52AM (#20060842)
whoops
Re:SaaS CTO Security Checklist by s_gourichon on Thursday May 30, 2019 @09:06PM (#20057465)
Solid milk chocolate! ;-)
Re:SaaS CTO Security Checklist by SmokeGS on Friday May 31, 2019 @12:22AM (#20058193)
A new take on "jinx you owe me a soda"