News for hackers. Stuff that matters.
Re:Show HN: Shadow IT Scan – Uncover SaaS Apps, Users and Ri... by throwaway48540 on Thursday August 01, 2024 @01:25AM (#41126396)
Nobody without the power to sign contracts in company name can legally register and use a SaaS at work. They can make a personal account and using it amounts to extracting data out of the company.
Re:Show HN: Shadow IT Scan – Uncover SaaS Apps, Users and Ri... by mathiasn on Thursday August 01, 2024 @03:02AM (#41126797)
From a legal point of view that might be true, but I believe people are not aware that this is a problem. They just register, check the "Agree terms of service" box and do whatever they want to do. I saw that often, especially with Marketing.
Re:Show HN: Shadow IT Scan – Uncover SaaS Apps, Users and Ri... by throwaway48540 on Thursday August 01, 2024 @03:52AM (#41127031)
It's not just legal but also the practical point of view. They committed fraud when they clicked that checkbox. It's exactly the same as signing a contract with someone else's name.
Re:Show HN: Shadow IT Scan – Uncover SaaS Apps, Users and Ri... by npmeye on Friday August 02, 2024 @01:46AM (#41136404)
Also when you do npm i. That's fraud.

Did you just agree to opt the company into that smorgasbord of licenses?

Re:Show HN: Shadow IT Scan – Uncover SaaS Apps, Users and Ri... by throwaway48540 on Friday August 02, 2024 @09:54AM (#41138825)
Not really, most (larger) companies have internal policies about that, listing the acceptable licenses. Which is exactly what I said - the employees are given the power to accept the terms. Some employees can sign SaaS contracts, though that's usually much less people.
Re:Show HN: Shadow IT Scan – Uncover SaaS Apps, Users and Ri... by galdosdi on Thursday August 01, 2024 @04:23PM (#41133191)
Then either the mandatory corporate training they signed off on their first day of employment was deficient, or they need to be fired for cause.