News for hackers. Stuff that matters.
Re:Hundreds of exposed Amazon cloud backups found leaking se... by lowdose on Friday August 09, 2019 @04:11PM (#20657885)
The guy that produces that last line definitely wears a suit.
Re:Hundreds of exposed Amazon cloud backups found leaking se... by atoav on Friday August 09, 2019 @08:24PM (#20659349)
As much as I dislike the typical suit wearer, the industry as a whole would be much better if IT-people wouldn’t blame everything on them and just tell them you won’t do it. If you are a welder and you boss wants you to weld a gas tank that hasn’t been emptied you tell him that he has no idea what the thing he asks for means, explain why and wait till the gas tank is emptied and everything is checked.

I worked as a Camera guy in film and I am known to be very fast – yet I had directors who wanted things even faster. Bit there is a natural limit to how fast you can get something done without having worthless garbage as a result.

You can take certain risks, skip certain advisable steps, focus on the most essential thing etc, but below that there waits literally nothing.

In my experience taking a step back, breathing in, out, and then proceed to doing it properly is in most cases faster than following your boss into panic and ditching common sense.

It is your responsibility as a professional to say “No” or “Stop” in certain circumstances. And if they really want you to do it, write down the possible consequences of what they force you to do and make them sign that they take the full responsibility.

There is so much talk about IT security with people frowning upon silly behaviour, yet any other craft would bend over backwards before you could force them into unsafe behaviour. If engineers would build bridges like we in IT operate, we would have many collapses a day.

Re:Hundreds of exposed Amazon cloud backups found leaking se... by tialaramex on Saturday August 10, 2019 @06:29AM (#20661259)
(Not advice to parent, just generally)

If you want to be more professional about this stuff, build up a Fuck Off Fund. Women in particular have written about fuck off funds in the context of making sure you don't have to nod along when HR says the VP who stuffed his hand down your top was "just fooling around" but - most people need that financial security any time they have to confront the boss. Save to be able to look the big boss in the face and tell them "Fuck Off". "Fuck Off" isn't the response you need when they tell you they want the database authentication disabled "just until Monday, Tuesday at the latest" that's when you want "No". But you need to know you _can_ tell them to "Fuck Off" so you actually say "No". Otherwise you may find yourself agreeing anyway.

Re:Hundreds of exposed Amazon cloud backups found leaking se... by yourapostasy on Saturday August 10, 2019 @08:35AM (#20661708)
For the youngsters out there, don't elaborate when you say "No". That is, don't mention your FOF. That weakens your position.

It is sufficient to look the manager/executive threatening you square in the eye, and state your position with deliberateness. Keep it professional, no raised voices, and be willing to walk away without hesitation if the other side gets abusive.

The really bad ones are those who tell you that if you step through that door don't bother coming back or similar, so be absolutely ready to commit. If you do the main event behind closed doors one-on-one and get that threat as you walk out, sometimes they'll come back with sugar suggesting a do-over. Generally Admiral Ackbar is right in this context, but it's your call.

The negotiation leverage that comes from the FOF is most powerfully communicated non-verbally and in a face-to-face setting, also through body language. The difference is very noticeable between those who have an FOF and those who don't, if you have enough experience. It can be faked, but it takes exceptional practice to fake. The tell starts with how fast and confident the "No" comes back.

This is the nuclear option of course. Exhaust all other avenues of reasonable negotiation first. Like an email with witnesses you pick for deliberately violating departmental policy, for example.

Re:Hundreds of exposed Amazon cloud backups found leaking se... by thegeomaster on Friday August 09, 2019 @09:14PM (#20659537)
>If engineers would build bridges like we in IT operate, we would have many collapses a day.

Maybe a bit offtopic at this point, but whay you said reminded me of this: https://www.stilldrinking.org/programming-sucks

Re:Hundreds of exposed Amazon cloud backups found leaking se... by jackcodes on Saturday August 10, 2019 @02:40AM (#20660567)
I really enjoyed this, thanks. Do you have any other similar ones, or tangentially related bookmarks you could share?
Re:Hundreds of exposed Amazon cloud backups found leaking se... by ygra on Saturday August 10, 2019 @06:25AM (#20661243)
It reminded me a bit of James Mickens’ writings. Not quite as weird and insane as him, but close.
Re:Hundreds of exposed Amazon cloud backups found leaking se... by nurettin on Saturday August 10, 2019 @02:51AM (#20660592)
All of these anecdotes have something in common. That the person who is asked to do something is informed about proper procedures. That is uncommon in IT, and especially in companies where proper procedure is too costly and not worth pursuing.
Re:Hundreds of exposed Amazon cloud backups found leaking se... by atoav on Saturday August 10, 2019 @04:08AM (#20660832)
It is still a communications problem. They want you to do the minimum. If I as a camera person do the real minimum the director will be pleased on set but they will get a heart attack in the editing room.

It easier to give in, take short cuts and produce garbage than explaining them under extreme stress that everything faster will result in nothing.

In my eyes it is comparable and I worked in both industries. The difference is, that as a DOP in film your name will be associated with the mess on the screen, while in IT the link is not that clear. This makes the difference.

And unless your director has a monitor (which they sometimes don’t) they cannot tell at all what you are doing. They wouldn’t even realize if you didn’t even switch the camera on.

I know that film or engineering is more

Re:Hundreds of exposed Amazon cloud backups found leaking se... by fixitfixit on Friday August 09, 2019 @04:37PM (#20658067)
Oh no. I work with very trendy Silicon Valley folks and it’s always someone in shorts and a t-shirt. Which is to say: it’s definitely a culture issue, but it doesn’t have to be a PHB doing it. I know a lot of really smart people who are under a lot of pressure, and combined with a lack of AWS knowledge, “just make it public” is surprisingly common.
[dead]
Re:Hundreds of exposed Amazon cloud backups found leaking se... by hinkley on Friday August 09, 2019 @07:44PM (#20659135)
How much do you think they'd pay to get to torture small animals?

I had a boss who brought up https://en.wikipedia.org/wiki/The_Mask_of_Sanity and organizational sociopaths about twice a month.

He must have been doing a better job of shielding us from his bosses than I thought, or I've had more crazy bosses than I thought, because a lot of it seemed like normal bureaucratic pathology to me, if a little more intense than usual.

[dead]
Re:Hundreds of exposed Amazon cloud backups found leaking se... by alexanderdmitri on Friday August 09, 2019 @11:40PM (#20659989)
This is a rather cryptic comment.

Are you saying there's some sort of group or club where you pay 15 cents for a mask and then put it on to get well-acquainted to psycologically aberrant individuals from a comfortable distance before they go prison?

Re:Hundreds of exposed Amazon cloud backups found leaking se... by new_guy on Saturday August 10, 2019 @01:54AM (#20660450)
It's not cryptic, just completely OT in a tech forum. He means the price of a bullet.
Re:Hundreds of exposed Amazon cloud backups found leaking se... by 1000units on Saturday August 10, 2019 @02:06AM (#20660482)
Not so! A .22LR cartridge is less than three cents when purchased in any reasonable quantity.
Re:Hundreds of exposed Amazon cloud backups found leaking se... by 1000units on Saturday August 10, 2019 @02:02AM (#20660473)
Fifteen cents is roughly the cost of a small informational pamphlet (likely more if printed with color and laminated but I have taken some artistic liberty in my previous comment), and prison is just one solution to a wider class of social impairments of which sociopathy is just one instance. Other instances of solutions share the quality of being unpleasant but necessary things any civilized society devotes energy to by learned necessity and include a functioning constitution, military, legislature, courts, police, and more. I thought this was clear but on rereading I see maybe I have failed; thanks for asking.
Re:Hundreds of exposed Amazon cloud backups found leaking se... by missingcolours on Friday August 09, 2019 @07:52PM (#20659189)
Nah. "Move fast and break things" usually has an implicit "and bypass all the security, we'll fix it later"
Re:Hundreds of exposed Amazon cloud backups found leaking se... by deadmutex on Friday August 09, 2019 @06:35PM (#20658754)
This seems like a bias
Re:Hundreds of exposed Amazon cloud backups found leaking se... by lowdose on Friday August 09, 2019 @08:15PM (#20659296)
It is and Nassim Taleb has frame it as the expert aka the empty suit problem.
Re:Hundreds of exposed Amazon cloud backups found leaking se... by deadmutex on Monday August 19, 2019 @01:13AM (#20735050)
To be clear, I didn't say the bias was with the person wearing the suit.