VW fired senior employee after they raised cyber security concerns

Re:VW fired senior employee after they raised cyber security... by giantg2 on Monday January 24, 2022 @03:33PM (#30063616)

This story doesn't surprise me.

I was responsible for system security for one of our internal systems. I found a major vulnerability - SQL injection with full schema owner privileges on all our pages. So I went to the principle/dept head to see how they wanted to staff the remediation and which of the two proposals they wanted to go with.

I was told they have a near real-time backup system and it's only and internal system (that handles obscene amounts of money), so they didn't want to address this. I asked if we have any documentation about the restore process or how long it would take. Nope. Have they ever tested this restore process. Nope.

Goodbye! Posted to a different team very quickly.

[ Parent | on HN ]

Re:VW fired senior employee after they raised cyber security... by ncmncm on Tuesday January 25, 2022 @03:08AM (#30069413)

That is the only sanity-preserving response.

Nobody can prove anything to their employer. And, you don't owe them anything. So, sometimes the best that can be done is to leave them to fail without you.

It sucks, though, when it is a bridge you know will collapse.

[ Parent | on HN ]