News for hackers. Stuff that matters.

A comment on MongoHQ Security breach. Parent comment

Re:MongoHQ Security breach by richadams on Tuesday October 29, 2013 @05:36PM (#6637653)
Seems a bit harsh to fire someone for that. People make mistakes. If anything, you know that this person isn't going to make the same mistake ever again.

Of course, if they do, then firing might be the way to go. First time mistake, second time incompetence.

[ Parent | on HN ]
Re:MongoHQ Security breach by bdcravens on Wednesday October 30, 2013 @02:40PM (#6642290)
Perhaps something like this should be in a policy handbook?

"Employees may not use passwords that are used with any service outside of the company."

Zero enforceability (but some companies would probably ask for a list of outside passwords I'm sure), but in the face of a direct policy violation, 100% fireable, and can help a company in terms of liability.

[ Parent | on HN ]