Re:A physical breach is a nightmare scenario for Capitol IT
by memetherapy on Friday January 08, 2021 @03:26AM
(#25682748)
Forget older employees, just employees. And I've seen enough poor security practices by 20 somethings at tech firms to have any faith in any user. Favourite example I've seen in several companies including one doing extremely sensitive work - senior devs with root access to the jewels of the kingdom doing pair programming on their own machines with interviewees / interns / new staff and leaving the computer unattended and unlocked to pop to the loo, grab a coffee, or let the junior work something out on their own.
Re:A physical breach is a nightmare scenario for Capitol IT
by saargrin on Sunday January 10, 2021 @09:47AM
(#25715062)
its nice of you to assume the tech staff on the hill are any younger than 80yo reps themselves
i worked for a long while in various near-it jobs before transitioning to my current position in cyber /devops
i am quite sure that non-technical office security is crap under the best of circumstances
and that before a bunch of yahoos start rampaging around it
at least the employees know they are being tracked and easy to find ,pass security clearance and probably are not the dumbest of people
whereas Trump lot were obviously idiots,and under an impression they would not be persecuted
i dont see why some foreign actor couldnt pay one or more of them to install something or other
"I just need to download the presentation from my website, can I use your computer real quick?"
Do you really think an 80 year old anti-tech representative would even consider that a problem?
I'd have to assume the computers are already protected from that attack vector.
Edit: I'm getting a lot of downvotes without replies, which makes me thing people don't agree with this. I wonder, how many have actually worked in corporate IT security for a non-tech company with older employees? Because things like this definitely happen on a daily basis.
Case in point: Pelosi's screen was unlocked when that guy sat down, which was at least 20 minutes after she left. That means that not only does she not lock her screen when she gets up, but the screen saver doesn't even auto-lock after 20 minutes.