Slashdot Mirror


Telecommuting Backlash

coondoggie writes to tell us that advocates of the telecommute have stood up against recent finger pointing based on recent telecommuter screw ups. One of the more notable screw up was the recent loss of many veteran's personal information by a VA employee. From the article: "Despite years of growing acceptance, telework still has such detractors. 'The No. 1 challenge is cultural inertia. It's motivating the middle managers, teaching them a new way of doing work,' O'Keeffe says. 'It's the Luddite mentality that we need to change.'"

250 comments

  1. The problem isn't telecommuting by Loconut1389 · · Score: 5, Insightful

    The problem here isn't telecommuting, it is bad security practices and these problems probably would have happened one way or another, whether it's over a SSH tunnel, VPN, or local on the lan.

    1. Re:The problem isn't telecommuting by susano_otter · · Score: 4, Insightful

      It's kind of hard to walk off with tons of senstive information when it's being transmitted over an encrypted channel.

      I think it really is about telecommuting, and laptop computers. More and more, sensitive data is portable, and more people are taking advantage of that to move sensitive data from "secure" environments to "convenient" environments.

      Having some asshat steal a computer full of data doesn't really happen that often to people who keep their computers locked in an office at their employer's campus.

      --

      Any sufficiently well-organized community is indistinguishable from Government.

    2. Re:The problem isn't telecommuting by drinkypoo · · Score: 4, Insightful
      The problem here isn't telecommuting, it is bad security practices and these problems probably would have happened one way or another, whether it's over a SSH tunnel, VPN, or local on the lan.

      I both agree and disagree. On one hand, the problem IS bad security practice. It's possible to telecommute safely. On the other hand, the simple truth is that telecommuting opens up new attack vectors. Your data can now be attacked on your system at home, before the VPN is up. It can also be stolen more easily; security on your average office building is better than on your average house.

      On the other hand, THIS particular problem could have been avoided by simply using some encryption. Clearly, those who take home confidential data without encrypting it are morons. Some of you are now parting company with me over my allegedly elitist attitude but let's face it, people have been encrypting messages for hundreds (thousands?) of years. This is not a new concept. A user taking home confidential data should be asking themselves how they can protect that data. Anyone who doesn't ask that (in our litigious society, especially) deserves what they get, because they're stupid.

      I don't expect everyone to know how to keep data secure. I DO expect them to care enough about it to seek the advice of someone who DOES know.

      --
      "You're right," Fisheye says. "I should have set it on 'whip' or 'chop.'"
    3. Re:The problem isn't telecommuting by Barleymashers · · Score: 2, Interesting

      Because of these type of events, I am now subjected to running everything encyrpted now by the company I currently have a contract for. Plus they force daily backups in case the laptop is stolen/lost. At first I thought it would be a hassle and there are some minor delays when the backup is taking place (seems to run at most inappropriate times), but so far I have gotten used to it and it really hasn't impacted my work. If this is the price I have to pay to telework, than so be it, it is better than having to trek the 80+ miles to the office every day.

      The real problem I have is the perception that when you "work from home" you are not really working, so I have to work extra hard so that people think I am working at all.

    4. Re:The problem isn't telecommuting by Loconut1389 · · Score: 3, Insightful

      Regarding the having the data on the work computer- this is exactly the problem.

      Of course the potential also exists for viruses or trojans to affect the data over the VPN.

      One could even argue that since these same problems could potentially exist on the local lan at the office (installing bad stuff on the machines (again, bad security)) that having it over a vpn is safer since it's not an always-on link.

      Bottom line- good security and not allowing people to take things home/offload data (part of good security) are crucial.

    5. Re:The problem isn't telecommuting by networkBoy · · Score: 5, Insightful

      Take your secure environment with you!
      My employer mandates that the encryption feature of our notebooks be used. But it's a PITA, especially if your drive gets corrupted. To counter that we have an on-line backup system that takes a daily image (file by file, not binary image of the disk, for obvious space savings possibilities) of your drive and stores it whenever you are in the plant. While you are off-plant you are still secure because of the encryption. If we lost a notebook we could lose billions of dollars (assuming it's the right notebook). Shit, the data on mine is worth ~$75-100M.

      The headlines should read: MegaCorp loses notebook with customer data on it. Company issues this statement: "This is a non-issue, the notebook was encrypted with a system that meets XYZ standard, it will take no less than 200 years for the system to be cracked."
      And the statement should be true.
      -nB

      --
      whois gawk date unzip strip find touch finger mount join nice man top fsck grep eject more yes exit umount sleep dump
    6. Re:The problem isn't telecommuting by Shadow+Wrought · · Score: 2, Insightful

      As much as I am an advocate of telecommuting, having your laptop stolen does no one any good. Middle managers may be luddites by definition, but opening themselves to this type of scandal so you can stay home simply doesn't balance on their risk/benefit sheet.

      --
      If brevity is the soul of wit, then how does one explain Twitter?
    7. Re:The problem isn't telecommuting by networkBoy · · Score: 1

      What do you guys use for your daily backups?
      We use CNB and I like it, you can defer the backup &&|| force it at a certain time (like lunch :)
      -nB

      --
      whois gawk date unzip strip find touch finger mount join nice man top fsck grep eject more yes exit umount sleep dump
    8. Re:The problem isn't telecommuting by iminplaya · · Score: 5, Funny
      Shit, the data on mine is worth ~$75-100M.
      Stay online for just a little while longer. I'm trying to get a lock...
      --
      What?
    9. Re:The problem isn't telecommuting by AK+Marc · · Score: 4, Insightful

      Having some asshat steal a computer full of data doesn't really happen that often to people who keep their computers locked in an office at their employer's campus.

      No, the companies give away the working computers with all the data on them when they are obsolete.

      More and more, sensitive data is portable, and more people are taking advantage of that to move sensitive data from "secure" environments to "convenient" environments.

      A VPN into a corporate network then a terminal session would fix most of the complaints. Have them work directly from the server and there are no problems. Have the VPN client check that the firewall and virus software is installed, running, and up to date and there are fewer holes. If you are really worried about it, toss more money at it and make a non-split-tunneled hardware VPN from the homes of those that will be going in, then use locked down terminal services. They won't be able to get anything from the Internet without the protections that everyone else in the office has, and no data will be ever put on the local computer.

      I can think of lots of ways to make these just about as secure as those at the office. The problem isn't figuring out how to make them secure. The problem is getting executive buy-in and end-user compliance.

    10. Re:The problem isn't telecommuting by networkBoy · · Score: 4, Insightful

      :):)
      Have fun with:
      2 proxies
      3 NAT layers
      1 terminal server (which I suppose is another proxy).

      My real point was that there is not a reason for theft of a notebook to be an IP asset issue. If I can "safely" take my data with me, then why not customer data in the same method?
      the answer is simple: most companies think their IP is worth more than customer records. If they would simply make the statement:
      {IP += CustomerRecords};
      then there would be no issue, as you would see the data locked up tight.
      -nB

      --
      whois gawk date unzip strip find touch finger mount join nice man top fsck grep eject more yes exit umount sleep dump
    11. Re:The problem isn't telecommuting by modecx · · Score: 2, Interesting

      Totally, most of the problems could be mitigated by good security practices.

      What about encrypting the whole workspace that the user works on? For example, take a VMWare image with a Windows or Linux environment and all the apps that the user needs to use for this sensitive information, put it on an encrypted virtual drive volume and there it is.

      It dosen't seem that these computers are the target of people who want the data, or even know that it's there, they just want the hardware... But it would be a good idea to make it basically impossible for the casual or professional snoop to get at this data.

      --
      Constitutional rights may be respected, repealed, or modified; but they must never be ignored.
    12. Re:The problem isn't telecommuting by Henry+V+.009 · · Score: 5, Funny

      Wow. That's some awesome security.

      By the way, for making your 1361st comment on Slashdot, you win a free USB drive. Where do I send it?

    13. Re:The problem isn't telecommuting by aqui · · Score: 2, Informative

      Agreed, good policies are important.

      If the data needed to be on a laptop, why wasn't it encrypted?
      There's absolutely no reason why a laptop cant be set up to
      have the entire home partion set up to autoencrypt and decrypt.

      Users without proper login credentials wouldn't then be able to
      access the data (assuming proper encryption algorithms are used).

      Again policies that clearly define what information can leave the
      office and in what form need to exist in parallel with smart
      use of security technologies.

      Unfortunately most people (and that includes many managers and policy makers)
      don't really understand technology and as a result tend to seek solutions
      that they do understand, even if they are poor solutions, rather than admit
      that they don't know and ask qualified people for help.

      --
      ----- "Profanity is the one language that all programmers understand."
    14. Re:The problem isn't telecommuting by fm6 · · Score: 2, Insightful
      Correct. But this is just one aspect of a wider problem: many companies have plunged into telecomuting without proper planning. Scoping out good security procedures is important, but only part of what you need to do.

      One aspect I've really seen neglected is providing a decent communication infrastructure. Software people use shared whiteboards a lot, yet it doesn't occur to companies that their telecommuters need whiteboard software. And then there's teleconferencing: the last big meeting I went to was missed by a lot of employees because they didn't allocate enough slots with AT&T. Then again, with so many people involved, it would have made more sense to provide a audio stream and take questions over IM. But that didn't occur to anybody.

      And let's be realistic about folks who telecommute from the other side of the planet. Fine, Indians and Russians work a lot cheaper, and are (sometimes) just as good as their North American counterparts. But you can't arbitrarily fill slots from the other side of the planet: people who work together have to be awake at the same time!

    15. Re:The problem isn't telecommuting by mrbooze · · Score: 4, Informative

      What Cook County does for the sherrif's department now is, the laptops issued for police cars have nothing more than base installs on them, and the officers use ssl/vpn to access a remote console of their actual system which is a vmware virtual machine hosted in their data center.

      This means that when a sheriff recently left his laptop in an unlocked police car and it was stolen, there was nothing sensitive on it.

      This isn't that different from how I've been telecommuting for a long time. I use my laptop to connect up to the corporate VPN and then connect via remote desktop to a machine I have configured for myself at the home office, where I do all my actual work.

    16. Re:The problem isn't telecommuting by alshithead · · Score: 1

      Telecomuting policies need to be put in place and enforced. Likewise, policies need to be put in place for any kind of data leaving the office be it on laptop, jump drive, backup tapes, or anything else...including hard copies. Of course that's easier said than done. I'm still partially deaf from the screaming that took place when we required all of the organization's Blackberrys to be password protected.

      --
      I reserve the right to think for myself. Others' opinions are optional. Puppy on lap = typos...not illiteracy.
    17. Re:The problem isn't telecommuting by pilgrim23 · · Score: 2, Insightful

      Yep. that computer...the one with a USB port, the USB port that fits so snuggly on my jump drive. that computer is nice and secure right there in the campus...

      I still recall a dumpster loaded full of blue bar computer printouts covered in student grades outside the main campus registrar's office. and that was thirty some years ago...

          It has NOTHING to do with telecommute, NOTHING to do with security, it has EVERYTHING to do with butinsky bureaucracy and government gimme. When, as a culture, we finally start saying "None of Your Business" as the most common reply when someone asks you for personal information we will ALL benefit.

      --
      - Minutus cantorum, minutus balorum, minutus carborata descendum pantorum.
    18. Re:The problem isn't telecommuting by ethanrider · · Score: 1

      SunRay at home.

      It is good.

      --
      ACMD eht detaloiv evah uoy ,erutangis siht no noitpyrcne eht gnikaerb yB
    19. Re:The problem isn't telecommuting by Anonymous Coward · · Score: 1, Insightful

      A big problem is you have a pc with 75$ million of company data on it. Even if it's encrypted. We should all be using thin clients and big chunks of company data should never be replicated out to personal systems (even on corporate campuses, much less remotely). A large portion of the blame lies with microsoft, the microsoft culture of IT, and its numberous advocates, especially non-technical upper management, but it will never be placed there in any meaningful way.

    20. Re:The problem isn't telecommuting by aslate · · Score: 5, Funny

      Via:
      2 PO Boxes
      3 Foreign countries
      A customer's secret, illegal account in the Cayman Islands

    21. Re:The problem isn't telecommuting by Sinus0idal · · Score: 4, Insightful

      What benefit do you gain from 3 layers of NAT and 2 proxies other than a ton of lag? A single well configured version of each should surely be sufficient.

    22. Re:The problem isn't telecommuting by Saint+Stephen · · Score: 4, Funny

      I used to have about a million drug test results on my PC (in 94, on my 486/50 w/ 40 meg HD baybee!)...

      Just for fun I did a GROUP BY query grouping who tested posted for what drug by SIC code, in descending frequency. The pattern was: Construction Workers, Marijuana and Cocaine, far and away #1. Second: employees of the school system, alcohol. Everything else was kinda scattered all over the map. I think that rather than demonstrating what kinds of people take what drugs, it demonstrates who gets hassled the most by the drug policies.

    23. Re:The problem isn't telecommuting by OnlineAlias · · Score: 3, Insightful

      Having some asshat steal a computer full of data doesn't really happen that often to people who keep their computers locked in an office at their employer's campus.


      Tell that to AIG. Reported 2 days ago...Fun News Link Outside of the VA lately the breaches have been from smash and grabs like this one. As an I.T. security guy, the first thing I look for when doing an assement is the physical security of home and especially branch offices. I'm not really disagreeing with you, just pointing out that one can't let their gaurd down, ever.
    24. Re:The problem isn't telecommuting by Emmettfish · · Score: 5, Funny
      This means that when a sheriff recently left his laptop in an unlocked police car and it was stolen, there was nothing sensitive on it.

      UN Inspectors are going to find that thief, because that thief has URANIUM TESTICLES. Stealing a laptop from an unlocked police car? Holy shit.

    25. Re:The problem isn't telecommuting by kbuckalo · · Score: 1
      This particular problem could indeed have been solved with encryption. Wrt telecommuting introducing another attack vector via the link between the laptop and the employer network, don't forget the link between the laptop and the Internet.

      If the employee not only uses the laptop to connect with their employer, but to browse the web with a web browser or use a mail client to read their email as well, they are a lot more likely to get infected by something with a keystroke logger, password grabber, etc which can facilitate a directed attack on the employer network.

      The issue of securing a network from attacks from the outside is one thing, but the additional burden of securing every offsite computer and educating every telecommuter on maintaining that security is mind boggling. From that perspective, perhaps the gains of telecommuting are offset by the costs of securing the offsite computers from the Internet, hence securing the employer network from the (infected) offsite computers.

    26. Re:The problem isn't telecommuting by Fudge.Org · · Score: 4, Insightful
      Having some asshat steal a computer full of data doesn't really happen that often to people who keep their computers locked in an office at their employer's campus.

      Consider yourself lucky to have never experienced two floors (dozens of employees) of locked PC's and laptops removed overnight... more than once. In my experience it isn't someone but some group and they know what they are after and they have tools. Yes, most criminals are stupid, but many are organized and professional.

      What's the bigger payoff?

      a) single telecommuter setup in home where there is someone that is around most of the time

      b) office space with dozens of systems guarded by the lowest price bid security firm/system

      --
      http://fudge.org
    27. Re:The problem isn't telecommuting by RsG · · Score: 1
      because that thief has URANIUM TESTICLES.

      Does that make tight fitting briefs a meltdown hazard? :-)
      --
      Erotic is when you use a feather. Exotic is when you use the whole chicken.
    28. Re:The problem isn't telecommuting by Anonymous Coward · · Score: 0

      This is the only time recently that I've actually laughed out loud at a /. comment.

      +1 mod point (if I had them...)

    29. Re:The problem isn't telecommuting by Lummoxx · · Score: 3, Interesting

      What benefit do you gain from 3 layers of NAT and 2 proxies other than a ton of lag? A single well configured version of each should surely be sufficient.

      Just taking a swag at it...


      Home network
      Corporate network, likely main corporate domain and/or remote access point.
      Corporate subnet, likely his corporate sub-domain.

      That's easily 3 NAT's and a couple proxies, only the first under his control.

      Am I close?

      --

      I am a viral sig. Please copy me and help me spread. Thank you.

    30. Re:The problem isn't telecommuting by darthcamaro · · Score: 1

      exactly right. if VA had proper protocols and procedures in place it wouldn't have mattered if the employee was on or off site

    31. Re:The problem isn't telecommuting by Kadin2048 · · Score: 1

      Doesn't really matter: if you take possession of a physical device, no matter what the chain of custody is, it could concievably betray your physical position. Just think, it could have inside it, in addition to some flash memory, a GPS receiver and a cellular modem/transmitter, and just report your location, or some kind of beacon transmitter. Cleverly designed, it could be pretty hard for you to detect (burst transmission, etc.).

      Granted, there are probably not too many adversaries in the world that have the capability of fabricating and using something like that, but it all depends how paranoid you want to be.

      --
      "Ladies and gentlemen, my killbot features Lotus Notes and a machine gun. It is the finest available."
    32. Re:The problem isn't telecommuting by fisternipply · · Score: 2, Interesting

      Only works if you have a network connection. When you're working on, say, a construction site in the early stages, with a very mobile workforce, it's a little tough to use the VPN. And a cellphone modem doesn't work very well three stories underground.

    33. Re:The problem isn't telecommuting by ralphdaugherty · · Score: 1

      If the data needed to be on a laptop, why wasn't it encrypted?

            From what I've gathered from news accounts, a file of every veteran since 1975 didn't need to be on a laptop. It was just some consultant copying everything critical at work and carrying it home to work on it.

            I don't even know why the article / slashdot even mentions telecommuting in regards to this. There was no tele, just commuting.

        rd

    34. Re:The problem isn't telecommuting by Kadin2048 · · Score: 1

      Agreed. I can't tell you the number of times I've gone into a supposedly "secure" facility and really wondered where they were getting their security people. Unlike all the bad 80s and 90s movies you've ever seen, most "corporate security" people that I've met are not scary ex-mil types, they're just your basic hourly wage slaves looking for something that's easier than working the retail floor at your local big box.

      Actual government facilities are different, but I can't imagine it would cost a whole lot just to toss cash at some of those brand-name facilities security people until they let you in the front door. If you're actually going after information (worth millions or billions) and not just equipment, giving one of those guys his annual salary in a paper bag is chump change.

      Or alternately, I can't imagine that the personnell retention rate of those security firms is very good: doesn't seem like it would be very hard to get someone on the inside to help you out a little bit.

      It used to be the case that physical security was much tighter; there was a time when a wall safe was a common feature of executive offices -- when's the last time anybody saw one of those? I know I haven't. As we're concentrating so much on information and data security, we have to be careful not to neglect physical security, because it's getting to the point where if a well-dressed person can't just walk in the door at a lot of places, they could probably buy their way in without too much trouble. If you're paying your security people minimum wage, don't be surprised when one of them disappears the day after all your data gets ripped off, never to be seen again.

      --
      "Ladies and gentlemen, my killbot features Lotus Notes and a machine gun. It is the finest available."
    35. Re:The problem isn't telecommuting by saskboy · · Score: 3, Funny

      Haven't you heard of the Onion Layer in network security?
      It's security that makes people cry, especially when a part is cut out of it with a knife.

      --
      Saskboy's blog is good. 9 out of 10 dentists agree.
    36. Re:The problem isn't telecommuting by complete+loony · · Score: 4, Funny

      Oh crap, I shouldn't have said he's a customer.
      Oh crap, I shouldn't have said it's a secret.
      Oh crap, I definately shouldn't have said it's illegal.

      --
      09F91102 no, 455FE104 nope, F190A1E8 uh-uh, 7A5F8A09 that's not it, C87294CE no. Ah! 452F6E403CDF10714E41DFAA257D313F.
    37. Re:The problem isn't telecommuting by zippthorne · · Score: 3, Funny

      Based on what experience do you believe UN inspectors capable of finding uranium?

      --
      Can you be Even More Awesome?!
    38. Re:The problem isn't telecommuting by colmore · · Score: 5, Insightful

      The headlines should read: MegaCorp loses notebook with customer data on it. Company issues this statement: "This is a non-issue, the notebook was encrypted with a system that meets XYZ standard, it will take no less than 200 years for the system to be cracked."

      Oops, the laptop that was stolen had the PGP password written on a post-it-note. Or it was the guys' daughters' college fund account number. Or they were logged in while working at a coffee shop, got up to use the bathroom, and came back to an empty table. Or a corporate spy stole it once, put on a keylogger, and then steals it again. Ask the police how private your fingerprints are. Does your boss put retina scanners on all company laptops? Can you be sure that nobody with data access would be dumb enough to keep any of that info on their USB drive or a CDR? Are you using strong crypt on your swap space? What do your bosses do to make 100% sure that nobody is printing out information on their home deskjet and leaving the printouts in the recycle bin on thursday morning? Are you so sure that there aren't moles in your office that you'll let a billion dollars juts walk out the front door? If your data is really as valuable as you say it is, then you need to have the working assumption that someone out there is going to pull some James Bond style shit to get at it, they're not going to stop at "aw shucks, they *encrypted* it!" A password is relatively easy to bribe someone out of. If they never have to show up on site to access the data, then that's all they'll ever need.

      When your data is valuable enough that people would REALLY want to steal it, people, not protocols and passwords, are the big problem. When you let people just walk out of your office with company secrets, you're not just increasing the size of the problem, you're adding entire DIMENSIONS to it. People get lazy about things that they have to do every day. Lab Chemists and Biologists have horrible cancer incidence rates because they eventually get lax with safety procedures, even though they know better than anyone on the planet how dangerous what they're doing is. The human brain is set up in such a way that something it encounters every day without visible harm stops registering as "threat" pretty fast. No matter how rigorously you try to follow standard XYZ at the office, people will get lazy when they're looking over some work in front of the TV.

      --
      In Capitalist America, bank robs you!
    39. Re:The problem isn't telecommuting by Anonymous Coward · · Score: 0

      They all don't have to run the same software. So, you would have to break through 3 different layers instead of just one (or one repeated 3 times).

    40. Re:The problem isn't telecommuting by Anonymous Coward · · Score: 0

      Just for fun I... I think that rather than demonstrating what kinds of people take what drugs, it demonstrates who gets hassled the most by the drug policies. No. Not really. What it demonstrates is that companies need to take better measures to keep private data out of the hands of retards.

    41. Re:The problem isn't telecommuting by arivanov · · Score: 1
      when's the last time anybody saw one of those? I

      Yesterday (I am not in the office yet).

      I bought the first for our first office 5 years back. We kept buying more across two moves. Over the years it has grown to 4 safes. 2 IT ones for data, 1 mixed for exec stuff and documents and one for finance. This is in a company of approx 50 employees which does not deal with confidential customer data.

      This is besides secure offsite storage of course.

      --
      Baker's Law: Misery no longer loves company. Nowadays it insists on it
      http://www.sigsegv.cx/
    42. Re:The problem isn't telecommuting by WuphonsReach · · Score: 1

      We go the low-tech route for our laptops / home users using Knoppix+NTFSClone (periodic images of the O/S) along with SecondCopy (for the data files, which runs every few hours) copying to encrypted USB/Firewire drives protected by TrueCrypt. TrueCrypt does very well in that scenario with good performance and SecondCopy is a very good file-level backup tool for user files.

      The hard part is files that are open all the time (such as Outlook PSTs). Mostly, we rely on a batch file that zips them up after logging in (and SecondCopy then sweeps the ZIP files to the external drive). Or we use Acronis TrueImage which images the drive in the background.

      Personally, I have multiple 300GB drives that I've mounted in StarTech DRW115 drive trays shoved into a BYTECC FireWire drive (I think the ME-320U2F). I had to drill 4 holes in the enclosure to mount the removable drive bay and it sticks out slightly, but it's working very well. If I didn't already own the drive trays, I'd have simply bought BYTECC ME-835U2F units which are aluminum, built-in P/S and include a fan to cool the hard drive directly. So far I've been rotating drives on a weekly basis with no issues.

      We've also considered whole-disk encryption systems like the DriveCrypt Plus Pack. CPU speeds are finally high enough (and have been for a few years) where it wouldn't be a significant performance hit.

      --
      Wolde you bothe eate your cake, and have your cake?
    43. Re:The problem isn't telecommuting by Anonymous Coward · · Score: 0
      And a cellphone modem doesn't work very well three stories underground.

      Of course not... And there's no system at all that could be used to link the crew underground up to an access point aboveground that did have access. That'd be impossible: once you are three stories underground, you're fucked as far as networking goes.

    44. Re:The problem isn't telecommuting by Anonymous Coward · · Score: 1, Funny

      But it tastes great with a RAM sandwich.

      Okay okay, I fail it. :P

    45. Re:The problem isn't telecommuting by supersnail · · Score: 2, Insightful

      The main point to be made here is that you do not store sensitive data in a location which is not physicaly secure. Not a home office , not a desktop machine anywhere and certainly not a laptop. But in a locked and secure server room. Also if you want a secure environment -- disable your companies desktop USB ports:- http://www.schneier.com/crypto-gram-0606.html#6

      --
      Old COBOL programmers never die. They just code in C.
    46. Re:The problem isn't telecommuting by RahoulB · · Score: 2, Funny

      Call Larry Ellison - it's a network computer!

    47. Re:The problem isn't telecommuting by peginald · · Score: 1

      Hmm. Serviced offices are often pretty poor on security. Out of hours, all it needs is one person to let someone they don't know into a building and you've got a problem.

    48. Re:The problem isn't telecommuting by CrazedWalrus · · Score: 2, Interesting

      Or alternately, I can't imagine that the personnell retention rate of those security firms is very good: doesn't seem like it would be very hard to get someone on the inside to help you out a little bit.

      It also probably wouldn't be hard to get a mole onto one of these security teams. Like you said, they don't have any special training coming in (military, police, etc). They're just department store types, and I can't imagine that the qualifications are much more than department store qualifications -- including simple "lack of criminal record".

      For organized crime, I'm sure a little identity theft wouldn't be beyond them. John Smith steals Arthur Dent's papers, gets the job, and the police knock on Arthur's door when they realize it was an inside job.

      Seems pretty basic to me.

    49. Re:The problem isn't telecommuting by VdG · · Score: 1

      Clearly if the will is there then teleworkiing can be very secure.

      I think that there is a larger problem with more mobile workers. Where the problem comes is if someone is attending a business meeting at a customer or supplier site where they can't be confident of getting a good connection to their own corporate network, or want to work whilst in transit between offices. For convenience it's very tempting to download any information that might be needed onto the laptop.

      Things will be easier with increasing use of VPN and the rapid spread of wireless access points. Something which is still missing, IME, is network access from within other companies: my suppliers don't usually give me anything more than a normal 'phone line - if that - which is barely adequate these days.

      In my own case, I don't have anything terribly sensitive: mainly just documentation in case the network connection is very slow, (if I've got no network connectin at all I can't do my work). But it's not hard to imagine staff having a lot of customer data, for example a sales manager taking copies of a lot of business-sensite data on the road.

    50. Re:The problem isn't telecommuting by Anonymous Coward · · Score: 0

      >>Shit, the data on mine is worth ~$75-100M.

      Then what the hell are you doing here? Sell the data and go live in Barbados!

    51. Re:The problem isn't telecommuting by daecabhir · · Score: 1

      Dammit, and me without any moderator points!

      --

      -- daecabhir (this mind intentionally left blank)
    52. Re:The problem isn't telecommuting by Drifter+X · · Score: 1

      This means that when a sheriff recently left his laptop in an unlocked police car and it was stolen, there was nothing sensitive on it.

      UN Inspectors are going to find that thief, because that thief has URANIUM TESTICLES. Stealing a laptop from an unlocked police car? Holy shit.

      Someone needs to warn his girlfriend: "When fired ... the exposed depleted uranium rod poses an extremely low radiological threat as long as it remains outside the body. Taken into the body ... depleted uranium may pose a long-term health hazard to personnel if the amount is large. However, the amount which remains in the body depends on a number of factors, including the amount inhaled or ingested, the particle size and the ability of the particles to dissolve in body fluids." http://www.gulflink.osd.mil/du/du_factsheet_4aug98 .html

    53. Re:The problem isn't telecommuting by Gr8Apes · · Score: 1

      and I thought I was paranoid with 2 NAT layers!!!

      But I agree with you - simply using the IDE password feature on the HD would be a major hindrance to data theft. Couple it with file encryption, and it'd be well nigh impossible to crack within the usable lifetime of the data.

      --
      The cesspool just got a check and balance.
    54. Re:The problem isn't telecommuting by Anonymous Coward · · Score: 0

      The problem isn't telecommuting, it is the practice of transferring sensitive or protected data beyond the security perimeter. Virtual terminal connections to a secured console on a resident server works perfectly well, allowing remote users to VPN or otherwise establish a heavily-encrypted pipe through which only keyboard/mouse and video/audio data is transmitted. Once the link is released, no data resides on the remote system. Add a few layers of encryption to the drive and connectivity protocols and you have the next best thing to never touching the data at all.

    55. Re:The problem isn't telecommuting by smcdow · · Score: 1

      Ask the police how private your fingerprints are. Does your boss put retina scanners on all company laptops?

      Now, there's a disturbing trend.

      I'm leary of using bio-markers as keys. I don't want to give crooks reasons to cut off my fingers for their fingerprints or remove my eyes for their retinas.

      --
      In the course of every project, it will become necessary to shoot the scientists and begin production.
    56. Re:The problem isn't telecommuting by tzanger · · Score: 1

      Yes, because GPS receivers are tiny and don't need a few minutes with a clear view of the sky to get a fix. And cell phone modules are tiny and work amazingly well without any kind of antenna. And all of this fits inside a tiny, functional USB drive...

      The beacon is a far more plausible scenario, but now you've got to try and find it somewhere in the world. :-)

    57. Re:The problem isn't telecommuting by Anonymous Coward · · Score: 0

      Yes, but do their laptops have SCMODS?

    58. Re:The problem isn't telecommuting by networkBoy · · Score: 1

      Fairly, except rather than home network, it's an isolated lab, corp IT treats them the same though so close enough.
      -nB

      --
      whois gawk date unzip strip find touch finger mount join nice man top fsck grep eject more yes exit umount sleep dump
    59. Re:The problem isn't telecommuting by networkBoy · · Score: 1

      not IDE pwd. The chipset in the notebook has a native encryption protocol. The contents on the drive are not readable without that algo and my key (print off of any of 5 of my digits).
      Pretty cool system really, but it adds ~$700 to the cost of the notebook (my WAG).
      -nB

      --
      whois gawk date unzip strip find touch finger mount join nice man top fsck grep eject more yes exit umount sleep dump
    60. Re:The problem isn't telecommuting by Anonymous Coward · · Score: 0

      My previous employer had a small fire safe (too easy to lift, not very secure) for several years, but one day decided they needed to bump up the security a notch...

      He brought a gun safe in. Now, this was partly for him and his son (nepotism! yay!), since his son has small children and needed a new place (not in his house) to store his guns. But they also put an ethernet hookup in there and plugged in a NAS (a small one) and the company's blank checks and various other pieces of valuable-to-the-business info (incorporation and tax documents, etc.).

      That's about as safe as you can get. That sucker weighs a little less than a ton when empty. It's all the way at the back of the building (so you can't just drive a truck in there and chain it up and tow it out), and it's bolted to the floor. It's also fireproof. And the best part... He got it for under $1000 from some rich guy who was getting divorced and had to sell off his toys.

    61. Re:The problem isn't telecommuting by jaxom_01 · · Score: 1

      The Cook County I know of is most of Chicago. I used to live in a not-so-nice part of town where there was more than once a cop car was striped bare (tires, light bar, lights, siren, etc) when the cop when into a house. He came out 10 to 15 minutes later and started swearing. A laptop is EASY by comparison.

      --
      The post made with 100% recycled electrons
    62. Re:The problem isn't telecommuting by networkBoy · · Score: 1

      AC:"A big problem is you have a pc with 75$ million of company data on it. Even if it's encrypted. We should all be using thin clients and big chunks of company data should never be replicated out to personal systems (even on corporate campuses, much less remotely). A large portion of the blame lies with microsoft, the microsoft culture of IT, and its numberous advocates, especially non-technical upper management, but it will never be placed there in any meaningful way."

      You know I really don't disagree with you at all, but the way life works is that I can not always be connected to a VPN, while I have time to do some code.
      -nB

      --
      whois gawk date unzip strip find touch finger mount join nice man top fsck grep eject more yes exit umount sleep dump
    63. Re:The problem isn't telecommuting by thePowerOfGrayskull · · Score: 2, Interesting

      Similar to what we have. Cisco VPN, connected to terminal server, terminal server. Cut, paste, and print disabled. External network (including home LAN) and local hard drive access disabled while connected to the VPN. Traffic between your PC and the VPN is encrypted. There's presently no way to get data from the corporate network to your home PC, and thus no risk of data loss. While there are holes in it, you need to look hard for them. They aren't the kind any user will stumble across accidentally or via stupidity.

      On the other hand, people with corporate laptops don't have the same restrictions, and many people are perfectly able to use a USB key fob into their work PCs. These kinds of oversights defeat the purpose...

    64. Re:The problem isn't telecommuting by Gr8Apes · · Score: 1

      way cool, and $700 is small potatoes for those systems with that kind of data on it. I wonder how much the negative publicity alone is costing those companies?

      --
      The cesspool just got a check and balance.
    65. Re:The problem isn't telecommuting by Ansonmont · · Score: 1

      ctrl+screenshot=data taken out of secure environment....
      -A

    66. Re:The problem isn't telecommuting by Anonymous Coward · · Score: 1, Funny
      Stay online for just a little while longer. I'm trying to get a lock...
      You hack with an F-16?
    67. Re:The problem isn't telecommuting by Anonymous Coward · · Score: 0

      What's the bigger payoff?

      Well that depends on the value of the data that the telecommuter has on their laptop. The issue isn't the cost of stolen hardware, it's the potential cost in stolen data (be that sensitive company IP, customer account/credit card details or whatever)... Competent thieves could steal a whole bunch of PCs and make off with tens or hundreds of thousands of pounds. On the other hand one thief could steal one laptop and make a hell of a lot more.

    68. Re:The problem isn't telecommuting by networkBoy · · Score: 1

      I'm guessing more than $700 times (the number of employees who may have sensitive data on a notebook).

      --
      whois gawk date unzip strip find touch finger mount join nice man top fsck grep eject more yes exit umount sleep dump
    69. Re:The problem isn't telecommuting by Anonymous Coward · · Score: 0

      Well, Hans Blix has shown they won't find it if it's not there!

    70. Re:The problem isn't telecommuting by Sentry21 · · Score: 1

      Haven't you heard of the Onion Layer in network security?

      Ah, the famous 'Networks are like Ogres' design...

    71. Re:The problem isn't telecommuting by Anonymous Coward · · Score: 0

      >Having some asshat steal a computer full of data doesn't really
      >happen that often to people who keep their computers locked in an
      >office at their employer's campus.

      My company recently had three laptops stolen -- from supposedly 'secure' areas (albeit the computers were in cubicles). Encryption of individual drives and/or network storage of all sensitive information would have been far more effective. Or give us friggin' offices already.

    72. Re:The problem isn't telecommuting by GregNorc · · Score: 1

      Or maybe the guy just stupid and/or high. I live in a relatively affluent area and most of the cop cars have VERY old computers... we're taking DOS era. Not exactly a great risk to reward ratio.

    73. Re:The problem isn't telecommuting by jandrese · · Score: 1

      Back in the 90s there was a "dashboard computer" you could get for the Crown Vics that was basically a 486. A lot of precints got them, but they've mostly been replaced by (much faster and more reliable) laptops these days. It's not uncommon to see cops still using them from time to time though, even if they are rather slow.

      --

      I read the internet for the articles.
    74. Re:The problem isn't telecommuting by aevans · · Score: 1

      After all, they didn't work their way up to middle management just so the unwashed hordes can enjoy the same benefits they have.

      Telecommuting is a status symbol to them, pure and simple.

    75. Re:The problem isn't telecommuting by Anonymous Coward · · Score: 0

      This is the worst article submission I've seen in a long time. The stolen laptops are evidence that with a proper telecommuting effort, the theft of a single laptop would NOT have catastrophic consequences. "Taking a laptop home" with 14 million records of data is a security issue. Telecommuting using a VPN and leaving the "work" on the secure server at the place of business is a better idea.

      To the media and management that confuse these "problems", they deserve a swift kick in the head. And they need to find new jobs. It's clear that people don't understand the nature of the problem.

    76. Re:The problem isn't telecommuting by ticklish2day · · Score: 1

      I know an UN inspector who found Uranus...

    77. Re:The problem isn't telecommuting by Anonymous Coward · · Score: 0

      I am quite sure that Barbados has extradition to the Uk.

    78. Re:The problem isn't telecommuting by ivan256 · · Score: 1

      Shit, the data on mine is worth ~$75-100M.

      Unless it's the location of $100M cash, or the instructions on how to access $100M cash, you certainly do not. Even then, it's probably not worth that much, since that much cash draws suspicion.

      Any other data you may carry and percieve to be worth that much money is really only worth that much to the lawyers that prosecute your (or whoever steals your laptop's) ass if you try and do anything with it that makes you any money.

      If we lost a notebook we could lose billions of dollars

      Again, total bullshit. Doubly so because you phrased it as 'could lose'... The only possible exception there being that you have evidence describing how you illegaly obtained billions of dollars.

    79. Re:The problem isn't telecommuting by zippthorne · · Score: 1

      Indeed, Hans Blix has shown they won't find it even if it is
      there.

      It's not his fault though. He was an egoist, and an egoist can't be expected to do the job asked of him. Not when there's a much more important-sounding job right there for the taking. So he fancied himself a diplomat and apparantly thought his job was to prevent war.

      He shan't be blamed, even if his course of action was ironically, the one choice that all but guaranteed an armed conflict: half-assed inspections and cover-your-ass ambiguous (and sometimes contradictory) reports peppered with political statements that should've disqualified him as the leader of a cold, impartial team of observers.

      --
      Can you be Even More Awesome?!
    80. Re:The problem isn't telecommuting by Anonymous Coward · · Score: 0

      Having some asshat steal a computer full of data doesn't really happen that often to people who keep their computers locked in an office at their employer's campus.

      Except when the people stealing the computers know exactly what they want and are usually rewarded by machines that are not as well protected/encrypted as some mobile machines are.

      http://www.saic.com/cover-archive/announce/012805. html SAIC Defense Industry Big Wigs Data stolen

      http://msnbc.msn.com/id/13327187/ AIG customer and prospective customer data stolen "machine was password protected"

    81. Re:The problem isn't telecommuting by networkBoy · · Score: 1

      Insight into a forture 100 companies long term roadmap and strategy is not worth at least $2b (thus billions).
      As to the value on my drive, I based that on our ASP margin times the number of parts sold per day times the estimated lead on our competitor(s) we would lose should one of them get the design info on my machine.

      -nB

      --
      whois gawk date unzip strip find touch finger mount join nice man top fsck grep eject more yes exit umount sleep dump
    82. Re:The problem isn't telecommuting by ivan256 · · Score: 1

      As to the value on my drive, I based that on our ASP margin times the number of parts sold per day times the estimated lead on our competitor(s) we would lose should one of them get the design info on my machine.

      Thank you for confirming my suspicions.

    83. Re:The problem isn't telecommuting by Barleymashers · · Score: 1

      We use Connected DataProtector, which does have a scheduling option - if I was allowed to modify it. They have things so locked down permissions wise that I am not allowed to change it. They force security patches (which always take forever, because they hit you when you boot, and then they make it reboot - and let's face it, windows doesn't boot the fastest and this company has scripts that run every day that makes it even slower). I am for a more open system, mostly because I like to think I know what I am doing, however I see there point in that it does control the amount of tech support they need, and everyone should be on the same versions and this should also control the licensing issues. I can't install anything on my own, access the registry, even most of the control panel is locked down. For release testing you need to get special permission to change your HOSTS file, it goes on and on...

  2. The "telecommuter" made me do it. by Anonymous Coward · · Score: 1, Insightful

    "coondoggie writes to tell us that advocates of the telecommute have stood up against recent finger pointing based on recent telecommuter screw ups."

    That wasn't a "telecommuting" problem. That was "taking work home". Something a lot of people do.

  3. Backlash for security? by DarthParadox · · Score: 4, Insightful

    Telecommuting isn't the problem. Ineffective security policies are.

    It's possible to set up secure connections between a telecommuter's computer and a secure server. Encrypted tunnels for VPN or something like that. Encrypt data on the laptop hard drive - if you even permit sensitive data to be stored there at all.

    But until government and corporations are seriously committed to taking the measures necessary to keep private data secure, incidents like this will keep happening, whether it's due to a stolen telecommuting laptop or a server that gets broken into.

    1. Re:Backlash for security? by betterunixthanunix · · Score: 1

      I completely agree. I telecommute for some of my work, and I do not even think of putting confidential information on my laptop -- it is always on a secure server, with strong password policies. I can think of only on situation where I would want that data on my laptop, and that is if I happen to be working while flying, where I cannot get a connection. Beyond that? There is no reason to carry sensitive data with you -- it is asking for trouble.

      --
      Palm trees and 8
  4. What finger pointing? by NineNine · · Score: 3, Interesting

    I read the whole article, and I couldn't find any instance of "finger pointing" by companies, the press, or the government. Who, exactly, is pointing fingers? This sounds like an article about a non-issue, if you ask me. I understand that many telecommuters want to continue telecommuting, but the article provides no information as to who this nebulous group of "finger pointers" are, or even if they really exist.

  5. the article says it all! by dan+dan+the+dna+man · · Score: 5, Insightful

    "The analyst whose laptop was stolen from his house was not a teleworker, just someone who took work home with him."

    On what grounds are you going to detract from telecommuting in that statement? Every worker I know a)has a latop and b)moves it around. I don't think any of us would call ourselves telecommuters in any sense of the word. The fact we take work home, on 'theivable' media isn't an argument against telecommuting, it's an argument for us not taking work home!

    I know there are telecommuters on /., but everyone I know, even in the IT industry has to go and show some flesh at a physical location to get paid. I'd love to telecommute but to be honest, it's mostly impractical for most people who have to engage with humans to get their job done effectively.

    The next question for me is, who is this backlash against?

    --
    I don't read your sig, why do you read mine?
    1. Re:the article says it all! by Anonymous Coward · · Score: 0

      I telecommute full time, and I don't have a laptop. My PC is in the office, I use a remote desktop over VPN. I absolutely love it, and security-wise, it beats the usual office/laptop combination.

    2. Re:the article says it all! by rthille · · Score: 2, Insightful

      The 'best' job I ever had was when I worked for a military contractor. I got paid overtime, I _never_ had to (couldn't) take work home.

      Of course the pay wasn't great and the work wasn't interesting, but my evenings and weekends were my own...

      --
      Awesome furniture, accessories and cabinetry in Santa Rosa, CA: http://humanity-home.com/
    3. Re:the article says it all! by FatAlb3rt · · Score: 1

      I go to the office every few months, but it turns out to be more of a social event. I get a lot more done when I'm at home.

    4. Re:the article says it all! by RobertLTux · · Score: 1

      .mil jobs where the bolts are titanium and the thermite is the cool military grade stuff

      (seriously when ever possible desktop system should be wired shut and the system bolted to the floor with the nuts on the inside of the case)

      Thermite would be placed on top of the primary hard drive and rigged to smoke the drive if its tampered with.

      --
      Any person using FTFY or editing my postings agrees to a US$50.00 charge
    5. Re:the article says it all! by fishbowl · · Score: 1


      >On what grounds are you going to detract from telecommuting in that statement?

      There's the whole fundamental point that when he took this work home he committed a major crime; possibly "espionage", or something on
      that order.

      When my company puts an ssh key on a server or gives me a webapp password, there is a certain level of consent and accoutability involved.
      This was just a plain screwup, or maybe an act of sedition, depending on the state of mind of the individual.

      --
      -fb Everything not expressly forbidden is now mandatory.
    6. Re:the article says it all! by Anonymous Coward · · Score: 0
      I go to the office every few months, but it turns out to be more of a social event.
      Pretty much the same here, except I go in every day.
      I get a lot more done when I'm at home.
      Well, here we part ways.
    7. Re:the article says it all! by Aceticon · · Score: 1

      In certain countries, getting payed overtime and having evenings and weekends for oneself is actually the standard way of working in IT.

      Overworking in IT is very much a US problem (and, IMHO, one of the big causes of chronical delays and buggy software for releases)

    8. Re:the article says it all! by blake3737 · · Score: 1

      but everyone I know, even in the IT industry has to go and show some flesh at a physical location to get paid. I'd love to telecommute but to be honest,

      Depending on how hot your IT people are, I REALLY wanna know where you work!

    9. Re:the article says it all! by Yutznut · · Score: 1

      No doubt, without having to go into the office once in awhile, who's phone would you get to put scotch tape on the microphone? your own? that's just not fun...

      --
      When in doubt.. do it on someone else's machine
  6. Telecommuting by Badgerman · · Score: 4, Insightful

    Interesting article. It pretty much notes what's being said here - good telework requires good policies, good enforcement, and good planning.

    In my last job I telecommuted for a good 3-5 months until I left. The company had excellent policies and security. There wasn't a single reported incident of data theft from our division in the two-and-a-half years I was there. I was definitely more productive, and I was also better able to plan around illness, holidays, and emegencies.

    It's all about good policy. A company without telecommuters is still insecure if it has a crap IT Risk policy.

    --
    "The Sage treasures Unity and measures all things by it" - Lao Tzu
    1. Re:Telecommuting by FirstTimeCaller · · Score: 1

      The company I work for has a policy of no source code on a laptop -- ever. Instead we keep our code on an encrypted USB thumbdrive (of course thumbdrives aren't allowed at some companies).

      Keeping sensitive information on a True Crypt volume is still pretty convenient, and if the laptop is stolen the data stays secure.

      Hey IT Managers: True Crypt is your friend...

      --
      Wanted: witty unique signature. Must be willing to relocate.
  7. VPN in / Tunnel in.. use Treminal Servers!!! by Wingfat · · Score: 3, Insightful

    Why cant these compaines use Term Server? it would then be a bit more on the secure side, at least that way you dont have dumb people taking their lap top home with personal data on it. I actually work as IT for a sub division of Bank of the West, we do not allow our users to have ANY borrower/customer data saved on their local machine. if they do they can be let go quicker then you can say "i didnt mean to save it on my desk top" some of the managers here can "telecommute" in. if they would let the loan processors here do that too, then we could close half of the office and save the company on rental costs energy costs and much much more. Plus not to mention the gas saved for the peopele that could work from home. I think with the gas the way it is, more companies should encourage their employees to stay at home.

    1. Re:VPN in / Tunnel in.. use Treminal Servers!!! by dotdevin · · Score: 0, Troll

      For the same reason that the entire world does not use SunRays or Citrix clients.

    2. Re:VPN in / Tunnel in.. use Treminal Servers!!! by dave562 · · Score: 1

      And that reason is?

    3. Re:VPN in / Tunnel in.. use Treminal Servers!!! by Anonymous Coward · · Score: 0

      I hope that you're not actually relying on the users getting into the habit of not saving files to their Desktop. You're really using Group Policies to map the Desktop to a folder on the server, right? Right?

    4. Re:VPN in / Tunnel in.. use Treminal Servers!!! by dotdevin · · Score: 0

      Citrix, TS, and other similar products produce an end user experience that is much less positive* than native application execution for the majority of business applications.

      Performance is slower, access is more complex, network issues and congestion cause additional delay, and environments are often not configured as each specific user might want/need.

      Just ask any of the millions of 'off shore' users of software housed in the US.

      *There are some very limited cases where something like Citrix is BETTER than native execution but they are few and far between.

      Finally, to the person who modded me Troll, please read and understand both the reply you are modding, the context it was posted in, and have some knowledge of the topic in general before wasting a moderation point.

    5. Re:VPN in / Tunnel in.. use Treminal Servers!!! by Shadowlore · · Score: 1
      if they would let the loan processors here do that too, then we could close half of the office and save the company on rental costs energy costs and much much more. Plus not to mention the gas saved for the peopele that could work from home. I think with the gas the way it is, more companies should encourage their employees to stay at home.


      It goes deeper than this. Less traffic == less congestion = less road expansion. Less congestion == better fuel economy for those who are on the road. less congestion == an opportunity for faster emergency servives response. Less traffic == less need for more spending == less need for taxes.
      --
      My Suburban burns less gasoline than your Prius.
    6. Re:VPN in / Tunnel in.. use Treminal Servers!!! by Wingfat · · Score: 1

      such a good point there. all goes back to the big oil companies and the government wanting more money. ;) i think it is time to start an IT island now. start a new government that has a mandatory work from home.. lol not really but that would be nice.

  8. Re:officially done. by lecithin · · Score: 0, Offtopic

    "slashdot hasn't had an interesting story in 14 days and my insightful comments are modded funny or redundant or flamebait"

    You're new here, aren't you?

    --
    It could be worse, it could be Monday.
  9. Re:officially done. by Joebert · · Score: 1

    Ya gotta learn to roll with the punches knucklehead.

    --
    Wanna fight ? Bend over, stick your head up your ass, and fight for air.
  10. Deserve what they get? by megaditto · · Score: 1, Funny

    Anyone who doesn't ask that (in our litigious society, especially) deserves what they get, because they're stupid.

    Whoever screwed up in that VA thing will likely get a promotion.

    The current administration has a pattern of rewarding incompetence. Recall NORAD and FBI higher-ups getting promotions after 9/11 and CIA's Tenet getting the top civilian medal for screwup on Iraq's WMD intel.

    Oh, and Iraq's Bremer getting Freedom Medal for 'losing' US$ 8,000,000,000 in Iraq, and Gen. Franks for sending enough troops. http://www.washingtonpost.com/wp-dyn/articles/A636 23-2004Dec14.html

    "Brownie, you are doing a heck of a job!"

    --
    Obama likes poor people so much, he wants to make more of them.
    1. Re:Deserve what they get? by drinkypoo · · Score: 1
      Anyone who doesn't ask that (in our litigious society, especially) deserves what they get, because they're stupid.
      Whoever screwed up in that VA thing will likely get a promotion.

      I don't know if this is the SAME VA thing, but the last one, the telecommuter got fired.

      --
      "You're right," Fisheye says. "I should have set it on 'whip' or 'chop.'"
    2. Re:Deserve what they get? by megaditto · · Score: 1

      And the higher-up that O.K.ed the staff to take out hardware probably got a bonus.

      --
      Obama likes poor people so much, he wants to make more of them.
    3. Re:Deserve what they get? by rahrens · · Score: 4, Informative

      Actually, IIRC, the telecommuter's boss and his boss both got dinged, too.

      Don't make light of this, a number of people got really badly in trouble over this. As a measure of how seriously the gov't takes the situation, it is rare for any civil servant to actually get fired. In spite of the reforms of Jimmy Carter's days, it is still difficult to fire gov't employees. You'd better have your 'i's dotted and the t's crossed, too! Upper management hates to go that far, especially if the employee has over ten years in, and I think this guy had 11 or 12. Get fired like that, and you lose your pension and everything. So if they fired this guy, it's serious.

      I work for another Department, and we take security very serious. ALL agency laptops are installed with a standard image using Ghost, an image that uses Pointsec to encrypt the entire hard drive. Yes, we take a performance hit, but to safeguard data, it's worth it. Users have no choice. It is installed before they get it, and when they are issued the unit, they are given the opportunity to set the password (at least 8 digits). If they forget it, they are told, the HD is toast, and must be reformatted. (not really, there are admin PWs we can use, but that makes them MUCH more careful!) They are warned not to store data on the HD, cause if the OS develops a problem, all we'll do is reimage it. We use an elaborate VPN system, with tokens, to allow employees to remotely connect. They don't need to keep data locally, and it is discouraged. With our setup, a lost laptop is just a lost item; a thief would have to reformat the HD to use the laptop. Our data is not accessable.

      --
      "Money is truthful. If a man speaks of his honor, make him pay cash." Notebooks of Lazarus Long, Robert A. Heinlein
    4. Re:Deserve what they get? by HardCase · · Score: 1

      And the higher-up that O.K.ed the staff to take out hardware probably got a bonus.

      Sort of - he was allowed to resign. After the dingus who took the computer home was fired.

      -h-

    5. Re:Deserve what they get? by russ1337 · · Score: 1

      MeMyfriends work area have a similar policy, Because meMyfriend operates 'thin client' with similar pointsec setup to yours, all staff are encouraged to store data on the server. However, if the vpn connection is unavailable (crap hotel / dialup), the BAD habit of storing data on USB sticks has crept in, which opens all the hard work of the IT staff. Staff are encouraged to store data on the pointsec secured HDD, but often dont, and rely on physical security, which is insane....

      Does your company have a no-usb drive policy like meMyfriends should?

    6. Re:Deserve what they get? by Breakfast+Pants · · Score: 1

      "If they forget it, they are told, the HD is toast...but that makes them MUCH more careful!" No, that makes them write the password down somewhere. Also, in this case telling them you can recover it would probably make them use a stronger password.

      --

      --

      WHO ATE MY BREAKFAST PANTS?
    7. Re:Deserve what they get? by heinousjay · · Score: 1

      Ah, yes. Nothing like turning a completely unrelated story into a political screed. There's no faster way to get the world to ignore you.

      --
      Slashdot - where whining about luck is the new way to make the world you want.
    8. Re:Deserve what they get? by rahrens · · Score: 1

      No, we don't. I do know that this policy, and a few others about these types of storage, are definately being revisited, especially in light of the VA thing. I know that not allowing usb drives would be a PITA, but ya gotta draw the line somewhere.

      --
      "Money is truthful. If a man speaks of his honor, make him pay cash." Notebooks of Lazarus Long, Robert A. Heinlein
    9. Re:Deserve what they get? by rahrens · · Score: 1

      they are already forced to use stronger passwords, and if a user wants to write it down, we can't prevent it. I DO try to tell users not to file it under "passwords" in their rollodex!

      --
      "Money is truthful. If a man speaks of his honor, make him pay cash." Notebooks of Lazarus Long, Robert A. Heinlein
  11. It can happen in an office building to by joshv · · Score: 4, Insightful

    I had a laptop stolen in a secured office building. Each floor required a badge, as did the lobby. A laptop at home is no more or less safe than a laptop at work. In fact, my house is probably harder to break in to than most office buildings.

    1. Re:It can happen in an office building to by Kesch · · Score: 1

      Hmm... did social engineering have anything to do with this? Badge readers are useless when someone else will swipe you in.

      Which comes back to your home being more secure, you don't just randomly let strangers wander in, and unless you have tons of parties, you usually have a pretty good mental log of who has entered recently.

      The best defense still ends up being encryption. The data on a laptop cannot do harm if it reads like gibberish.

      "Hmm... it seems that @VA()#$aSD on !@$%ERFG street has AXPMD%CL# as his SSN."

      --
      If this signature is witty enough, maybe somebody will like me.
    2. Re:It can happen in an office building to by Anonymous Coward · · Score: 1, Interesting

      "The data on a laptop cannot do harm if it reads like gibberish"

      Before, or after we install the keylogger, take a couple days off, then scoop up the laptop?

    3. Re:It can happen in an office building to by RyanXP · · Score: 1

      I hope for your sake that nobody from here tests this theory out and tries to social engineer your wife.

  12. The real problem by Chysn · · Score: 3, Funny

    You know what the REAL problem with telecommuting is? It's kids. There you are, sitting at home, trying to set apart work from nonwork, but the kids know you're in the house. They want to play, and they're just so cute and irrisistible.

    --
    --I'm so big, my sig has its own sig.
    -- See?
    1. Re:The real problem by chez69 · · Score: 1

      close the door. problem solved. I have two kids 2 & 4, I just close the door and they leave me alone.

      --
      PHP is the solution of choice for relaying mysql errors to web users.
    2. Re:The real problem by Anonymous Coward · · Score: 0

      close the door. problem solved. I have two kids 2 & 4, I just close the door and they leave me alone.

      Yeah right. My kid would just start banging on the door and yelling until my wife got sick of it. To shut the little one up, my wife would open the door, plop the little inside and say "your turn" and shut the door.

    3. Re:The real problem by Anonymous Coward · · Score: 0

      To which the appropriate response is "Fine, I'll go play with the kids. You sit down and earn us some money."

    4. Re:The real problem by dhasenan · · Score: 2, Funny

      A handful of strychnine will solve that, albeit in a somewhat unpleasant manner.

    5. Re:The real problem by chez69 · · Score: 1

      marriage is about compromise. when I'm done working I take the kids and give her the quiet time she wants. I give up some of my free time so she can have some.

      I work from home 2 -3 days a week and I get more done at home then at work.

      --
      PHP is the solution of choice for relaying mysql errors to web users.
    6. Re:The real problem by 1u3hr · · Score: 1
      close the door. problem solved. I have two kids 2 & 4, I just close the door and they leave me alone.

      So you lock them up in a playpen with some kibble and hose them down once a day?

    7. Re:The real problem by chez69 · · Score: 1

      my wife takes care of them. I usually take an hour lunch during the day and play with them.

      when I'm done working, I keep an eye on them so my wife gets quiet time.

      --
      PHP is the solution of choice for relaying mysql errors to web users.
    8. Re:The real problem by wtansill · · Score: 1
      You know what the REAL problem with telecommuting is? It's kids. There you are, sitting at home, trying to set apart work from nonwork, but the kids know you're in the house. They want to play, and they're just so cute and irrisistible.
      You forgot tasty! MMMMM! Barbeque!!!
      --
      The contest for ages has been to rescue liberty from the grasp of executive power. -- Daniel Webster
    9. Re:The real problem by 1u3hr · · Score: 1

      I'm working at home with an 8-year-old to look after as well. She's at school half the day, but it's still a major distraction.

    10. Re:The real problem by Redwin · · Score: 1

      Your only half right, the real problem is cats. Go out the room for a couple of minutes to get a coffee and come back to find the cat sitting on the keyboard with a "Sent Email" dialouge box on the screen. Aside from that, your comment was correct.

      --
      Warning, comments may not have been passed by the sanity department of my brain.
  13. hogwash! That is a security issue, not slave issue by v3xt0r · · Score: 3, Insightful

    This is not the fault of telecommuting, although tyranical bosses who hate telecommutors will blame telecommuting (so they can chain you to your cubicle and bark orders and breath down your neck), when the reality is... accountability in the IT/Network Security dept.

    I telecommute from around the world and work directly off machines via SSH, so even if my laptop is stolen, nothing confidential or work-related can be compromised.

    Of coarse, if you're IT/Network security policies allow telecommuters to actually work ON their own hd's, then that is your fault for having a flawed IT/Network security policy.

    Either way, this is FUD for anti-telecommutism.

    --
    the only permanence in existence, is the impermanence of existence.
  14. security issues aside... by papasui · · Score: 4, Insightful

    One thing I personally feel is you don't develop a bond with your co-workers if you don't see them face to face. I'm a network engineer for a large fortune 500, I have a company laptop with VPN software that I can use to work from home if I want. Occasionally I do, especially if I need to watch a sick child but still want to get some work done. Otherwise I try to go into my office and be present for face to face meetings whenever possible. My direct boss lives and works 300 miles from my office and I rarely see him, maybe 6 times a year. We talk over the phone and email frequently but we don't have the kind of boss/employee relationship that I've had in the past. Very hard to feel comfortable working/trusting other people when they seem almost like strangers to you.

    1. Re:security issues aside... by sholden · · Score: 1

      So you have a poor implementation of telecommuting. Oh well, lot's of offices have poor implementations of office layouts and so on too.

    2. Re:security issues aside... by inKubus · · Score: 4, Insightful

      Well, bonds are good. But so is working without distractions. For a coder or programmer, being at home is probably the best environment. No one cares about the lack of shower that leads to grease level 6 where the real work gets done. Maybe the nut cheese vapors have some sort of nootropic effect.

      Anyway, I think the best thing is a good mix of tele and in the office work. For me, I like to tele in the morning from home where I have my dual monitors, my espresso maker, my clean air, etc. It allows me to work solid in the morning right after getting up until I start to lose focus. I'm usually at my highest focus right after waking up. If I waste that time showering and driving, I'll just sit around at work.

      So I work in the morning from home and when the focus starts to fade I save all and sync up, and then go shower and commute. I spend about the same amount of hours working but FEWER hours in the car, etc. becuase the traffic is lighter at 10:30 than at 7:30. Plus there's fuel savings, etc. And I don't have to go in every day--sometimes you get on a roll and don't need to go to the office to stay motivated to work.

      There are some jobs that need you to be there: anything physical obviously (factory worker, garbageman, etc.). In my opinion, most meetings are bullshit though. Sending an email is usually enough to get it across. But I think some people need meetings to make them feel like they are part of a family. I'm like a hitman, a contractor, BOFH style, so I just do what I do.

      What really bugs me is when I get PICNIC calls from the office (usually the same couple of people) who demand I come in and make their computer run faster or reconnect the cable they kicked out of the wall. Oh well, I bill extra for those.

      --
      Cool! Amazing Toys.
    3. Re:security issues aside... by ScentCone · · Score: 1

      One thing I personally feel is you don't develop a bond with your co-workers if you don't see them face to face

      Well, the guy I report to (on the current day job) is hundreds of miles away, and I see him maybe twice a year. Once-a-week status calls, plenty of e-mail, and as-needed project chats... but essentially no normal "bonding" face-time. My closest co-worker/counterpart is a thousand miles away in the other direction, and while we work on the same issues and share lots of information and talk most weeks, we've never met in person, ever. None the less, we all get along fine and get work done.

      My experience working in an office, physically near a lot of people, is that I get the opposite of a bond with many of them. Familiarity breeds contempt, as they say. Personal foibles, tics, and microwaved tuna-fish do more to UNDO productivity than remote working ever can, at least with people in my line of work.

      --
      Don't disappoint your bird dog. Go to the range.
    4. Re:security issues aside... by RedWizzard · · Score: 2, Interesting
      One thing I personally feel is you don't develop a bond with your co-workers if you don't see them face to face. ... My direct boss lives and works 300 miles from my office and I rarely see him, maybe 6 times a year. We talk over the phone and email frequently but we don't have the kind of boss/employee relationship that I've had in the past. Very hard to feel comfortable working/trusting other people when they seem almost like strangers to you.
      I think it's got more to do with the people involved. I've had great working relationships with people who work in offices in other countries and who I've only met in person a couple of times.
    5. Re:security issues aside... by Anonymous Coward · · Score: 1, Interesting

      I've read that it's easier to get passed over for promotions, raises, and plum assignments because of this (the not seen or heard thing). True?

    6. Re:security issues aside... by jdgeorge · · Score: 1

      One thing I personally feel is you don't develop a bond with your co-workers if you don't see them face to face....

      Although I heartily agree, I'm guessing that some of the Slashdot stereotypes who don't leave their mothers' basements except under cover of darkness may not be sympathetic to what I perceive as the advantages of working with colleagues face to face.

    7. Re:security issues aside... by papasui · · Score: 3, Interesting

      One thing I notice is it allows people who don't volunteer to fade in the background... Guy I work with has the same title as me (network engineer) but has been doing it for 5 years longer and actually reports to another network engineer who then reports to my boss (if that makes sense). He doesn't volunteer to take projects so people forget about him and don't offer him projects. It really requires you to make an effot to be noticed. That said it's working ok for me but I make an effort to try and make contact with my boss every other day.

    8. Re:security issues aside... by jafac · · Score: 1

      Honestly - for some of my coworkers, I think that my "bond" would be better if I never see them face to face.

      Frankly, some of them get away with so much slacking in the office, under the noses of their managers, it's a wonder how they get away with it.

      --

      These are my friends, See how they glisten. See this one shine, how he smiles in the light.
    9. Re:security issues aside... by the_womble · · Score: 1
      No one cares about the lack of shower that leads to grease level 6


      I assume you are single - and planning to remain so.

    10. Re:security issues aside... by inKubus · · Score: 1

      I assume you are single - and planning to remain so.

      Married actually :)

      --
      Cool! Amazing Toys.
    11. Re:security issues aside... by Cederic · · Score: 1


      >> For a coder or programmer, being at home is probably the best environment.

      Unless you are the sole developer, I disagree completely. Software development is a very social process. Good software development needs good communication.

      Ideally I want my entire team - manager, developers, testers, users, infrastructure people, support - all sat at the same desk. Physically that gets a little cramped so I accept a compromise of being in the same room.

      Obviously that's the ideal. At the moment I have a team spread across three UK sites, a location in Germany and two cities in India. Productivity has suffered tremendously as a result.

    12. Re:security issues aside... by Anonymous Coward · · Score: 1, Insightful

      Ideally I want my entire team - manager, developers, testers, users, infrastructure people, support - all sat at the same desk. Physically that gets a little cramped so I accept a compromise of being in the same room.

      And while the manager, some of the other developers, testers and users are chit-chatting, and the support people are answering phones, the code gets written at a third of the speed, with three times as many bugs, because peple can't concentrate.

      We have that problem where I work. Even though only the developers are in the same room, most of the time at least one group is talking. Oh, did I mention that I'm at work, posting at slashdot? You see, the guy three meters from me is talking...

    13. Re:security issues aside... by esper · · Score: 1

      There is far more to the world of "communication" than just face-to-face interaction. That may be the mode of communication that works best for you, but it's not best for everyone.

    14. Re:security issues aside... by Slashcrap · · Score: 1

      He doesn't volunteer to take projects so people forget about him and don't offer him projects.

      And then there'll be a performance review and he'll probably be let go because he isn't involved in enough projects.

      Unless he has friends in high places, which would apply whether he works in the office or at home.

  15. Questioning a basic assumptions by putigger · · Score: 4, Insightful

    I don't see anyone asking the question: "what effect does telecommuting have on productivity?" I work in the R&D arm of a major multinational corporation and the projects I work on are highly collaborative. I can often accomplish more in 15-30 minutes of face-to-face conversation with a colleague than in an hour or more over the phone or video conference, even with fancy collaboration tools like Lotus Sametime and Microsoft NetMeeting.

    1. Re:Questioning a basic assumptions by gvc · · Score: 3, Insightful

      Depends on what you're doing, your corporate culture, and how independent the workers are.

      Face-to-face can be a big waste of time. Meetings, water cooler chat, and so on tend to be more exercises in shoulder rubbing than productivity. They may increase or decrease employees' effectiveness.

      I totally agree that high-tech tools are a waste of time. Email is great when the rubber hits the road, phone calls are fine for brainstorming, and conference calls with a shared spreadsheet or ppt presentation or whatever are just fine for meetings.

      The real issue with telecommuting is the tendency -- perceived or real -- to goof off. So I guess if you're running a sweatshop, it is bad; if you're running an operation with employees who are mature and motivated to see the operation succeed, telecommuting can be good.

    2. Re:Questioning a basic assumptions by putigger · · Score: 1

      You are right that whether or not telecommuting is productive or not depends upon circumstances. For my work, which often involves very detailed technical discussion, it can be very helpful to actually have the person you're talking to in front of you, be able to draw on a whiteboard, play with the modeling softeare he's using and so on. This is not to say taht there aren't situations where a competent, independent person can get the job done perfectly well from a remote location.

    3. Re:Questioning a basic assumptions by ergo98 · · Score: 1

      I can often accomplish more in 15-30 minutes of face-to-face conversation with a colleague than in an hour or more over the phone or video conference, even with fancy collaboration tools like Lotus Sametime and Microsoft NetMeeting.

      Obviously ever person, team, and project will yield different results with different levels of physical collaboration, however I call shenanigans: My experience has been that the people who think that face-to-face is superior for "getting things done" measure completely ridiculous criteria as progress, when it's nothing of the sort.

      I worked on a project where the project manager insisted on incredibly frequent meetings, scheduling about two dozen people for every meeting. He'd put out agendas, comprehensive minutes including detailed transcripts, lots of project plans, etc. He'd often commend the team (really himself) on the great progress we were making, and wasn't it so productive that we were getting together to hash over these issues.

      The only problem is that we were getting nothing done. Absolutely nothing. Every meeting was a retread of the one before, going over the same issues with barely invested users. Collaboration was killing the project.

    4. Re:Questioning a basic assumptions by putigger · · Score: 1

      One piece of relevant information: in my case, I only ever see my collaborators once or twice a year (they're overseas). Face-to-face meetings can be poorly used and overused, but being able to meet in person on a somewhat regular basis can be extremely useful.

    5. Re:Questioning a basic assumptions by RedWizzard · · Score: 1
      I don't see anyone asking the question: "what effect does telecommuting have on productivity?" I work in the R&D arm of a major multinational corporation and the projects I work on are highly collaborative. I can often accomplish more in 15-30 minutes of face-to-face conversation with a colleague than in an hour or more over the phone or video conference, even with fancy collaboration tools like Lotus Sametime and Microsoft NetMeeting.
      I don't see anyone claiming that telecommuting is a good option for every situation. But just because it would make you less productive doesn't mean the same applies in all cases either. In my case there is no one in the local office I need to collaborate with and I report to a manager in a different country. So telecommuting makes no difference.
    6. Re:Questioning a basic assumptions by mswhippingboy · · Score: 3, Interesting

      Of course how effective you can be as a telecommuter depends on your profession. I work in IT and have been working 100% telecommute for about 7 years and it has worked out just fine. I can get a lot more done with email and phone than I ever could with face-to-face meetings. I can put my thoughts together concisely in an email and avoid the smalltalk. I can also keep working while I'm listening in on a conference call (thanks to the mute button) and multitask more than one project at a time. It's not uncommon for me to work on a project with the project leader in Arkasas, the DBA in Missippi, the customer in Texas and the data center in Louisianna so the work environment is disparate anyway. Face-to-face is fine and beneficial for gaining the comfort level of the employer, but if you can gain their trust with solid results it really makes no difference. As a bonus, I'm able to charge cheaper rates because I don't have a lot on travel expenses.

      --
      Sometimes the light at the end of the tunnel is the headlight of an oncoming train.
  16. SAAS baby! by bjcopeland · · Score: 1, Interesting

    The VA issue was the dude had stuff on his laptop. This is where software-as-a-service is the answer. A centralized, secure (as it can be) place for data. I think its insane and stupid in this day and age to have any sensitive material on a laptop. Its almost an archaic way of of thinking nowadays. Look at Salesforce.com - they have the right idea.

    Write once - access anywhere if you have the credentials and online access.

    1. Re:SAAS baby! by johnebailey · · Score: 1

      An interesting comment, especially the last part: access anywhere if you have the credentials and online access. But what if you don't have the online access? I work everywhere regardless of whether I have an internet connection or not. Admittedly, I do not keep private data on my laptop, but I do have source code and copies of the database schema with dummy data there. Have you ever tried to compile an application across a VPN connection? It doesn't work. This is why the tools make it easier for you to move the information back and forth from your laptop to the server. Although we have gone a long way toward making the world interconnected there are still numerous places where it isn't. There is nothing worse than being at a client site to do a presentation and finding that the room doesn't have an internet connection, wireless or otherwise and not having the data and applications you need on your laptop. Security is always a challenge of balancing usability with protection. Setting everything to be accessed only from a secure location is very secure, but considerably less useful. It is up to mobile workers to follow standards in how they work to secure what they do have on their laptops. I only keep projects on my laptop while I am working on them and I secure the directories where my data is stored. In addition, I only keep what I need to keep on my laptop, anything else is on the server.

  17. When will managers realize that you laptops ==evil by spicydragonz · · Score: 1

    My computer is dieing and my boss would not let me get a new PC unless it was a laptop so I *could* do work from home (on my own time I assure you). I just leave it on my desk plugged in to the station.

  18. Re:officially done. by Who235 · · Score: 1, Offtopic
    my insightful comments are modded funny or redundant or flamebait


    That's not entirely true.

    Some of them have been modded 'Offtopic' or 'Troll'.
  19. Re:When will managers realize that you laptops ==e by Zadaz · · Score: 1

    Sounds like the problem isn't laptops, it's your continued employment under a shitty manager.

  20. Telecommuting is a cornerstone of geek culture... by Ingolfke · · Score: 4, Funny

    Without it... many geeks, particularly on this site, will be forced to bathe, work, and not "work" while watching ESPN, anime, or porn. The attack against telecommuting is the cultural eradication of the information age.

  21. Oh yeah, the VA loss was just an accident... by MikeRT · · Score: 3, Insightful

    What are the odds that the weekend he'd take a dump of the records of 26M veterans home would be the weekend he got robbed? Someone better get the FBI on this guy's ass because he's probably got a fat Swiss bank account waiting for him after he loses his job and does a little time in the pokey. What a great coincidence that the time he takes the motherload of personal information home is the time he is the victim of a little "smash and grab..."

    1. Re:Oh yeah, the VA loss was just an accident... by ipfwadm · · Score: 4, Informative
      What are the odds that the weekend he'd take a dump of the records of 26M veterans home would be the weekend he got robbed?

      Insightful, eh? How about "uninformed".

      From MSNBC:
      The agency has acknowledged that the longtime midlevel employee -- who has since been fired -- improperly took the information home on an unsecured personal laptop for three years, apparently without his supervisor's knowledge.
      So no, this wasn't just "dumb luck". It was an accident waiting to happen.
    2. Re:Oh yeah, the VA loss was just an accident... by MonkeyCookie · · Score: 1

      What are the odds that the weekend he'd take a dump of the records of 26M veterans home would be the weekend he got robbed?



      I'd say that in the D.C. area, the odds are pretty good.

  22. Giving up on telecommuting by Anonymous Coward · · Score: 5, Interesting

    Ive been telecommuting for over 5 years now and Im about to give up.
    People are resistant on working in ways to accomodate telelcommuting. People will wait for me to visit the office..even if thats many weeks - rather than pick up the phone.
    I also find that when people want to play politics - you are at a severe disadvantage when telecomuting.
    Every time management changes you have to reconvince them its viable and I have decided over all that
    Thats despite the fact that I work in an IT department for a large vibrant and successful company that prides itself on its forward thinking.
      So after 5 years - Im giving up - not for technical reasons.. which I have been able to manage one way or another - but because the culture - even in IT is just not accepting of telecommuters and in fact disdvantages them.

    1. Re:Giving up on telecommuting by Slashcrap · · Score: 1

      People will wait for me to visit the office..even if thats many weeks - rather than pick up the phone.

      I've never found that at all. Of course, I do work for a telecoms company which may make people more used to picking up the phone.

  23. Not an excuse to take private customer info home by Eric+Smith · · Score: 3, Insightful

    There's no good reason why a laptop taken home needs to have private information about customers/patients/clients/etc. on it. The customer data can be kept on an enterprise database server that is less susceptible to theft or to being accessed from insecure networks. The telecommuting employees can access the data remotely via an encrypted VPN, or use Windows Terminal Services, VNC, SSH, or the like over the VPN.

  24. Telecommuting is a mortal threat to middle mgmt. by Anonymous Coward · · Score: 0

    What will managers do if they can't check on what employees are doing in their cubicles? Seriously, what will they do?

  25. Telecommuting is not a slam dunk by pedleyj · · Score: 4, Insightful

    The backlash against telecommuting is not just security related - it's cultural. How can an organization stay fresh and bring on new people who can learn from mentors and rapidly come up the learning curve if all the senior engineers are tucked up at home coding in their PJs? How will that organization build a culture, build commitment, build team spirit? There have to be some limits or a company will stagnate. security issues can easily be handled with better technology over time but I don't think the cultural ones are so easily dealt with.

    1. Re:Telecommuting is not a slam dunk by Anonymous Coward · · Score: 1, Interesting

      Eh?...would these mythical organizations also be the same organizations that are stampeding towards off-shoring everything but the CEO? If businesses can justify offshoring all forms of engineering and be satisifed why can't they handle telecommuters?

    2. Re:Telecommuting is not a slam dunk by jasonditz · · Score: 2, Interesting

      They develop culture the same way sites like slashdot develop their own unique cultures... they build commitment by hiring committed individuals.

      As a telecommuter working for an organization composed largely of telecommuters, I can safely say it's not for everyone. But at the same time... disgusting, Office Space-esque cubicle culture... that's not for everyone either.

      I live a thousand miles away from any of my co-workers. I've never met anyone in my company. We communicate by phone, by email, by IM... and it just works. Sure, we don't have a company softball team that way, but we also don't have all the bullshit office politics I've heard some people who work outside the home talk about.

      I know people who've done the telecommuting thing and hated it, and couldn't wait to get out of it. For me though, I'm never going to work outside the home again if I can help it.

  26. Now now by /dev/trash · · Score: 1

    I am sure he has a mortgage and a wife and kids to feed.

  27. Offtopic by Anonymous Coward · · Score: 0

    If I post something about telecommuting, it's off-topic because the story is about someone who doesn't telecommute. Can I beta tag the summary off-topic?

  28. If you can telecommute... by Anonymous Coward · · Score: 2, Insightful

    Think twice before pushing telecommuting to your boss, people. If you can telecommute from the other side of town and do your job effectively, someone from India or China can do it frm the other side of the planet, and for a lot less money. If there's an easier way to mark your position with a flashing neon "OUTSOURCE ME!" sign, I haven't heard of it...

    1. Re:If you can telecommute... by Tablizer · · Score: 1

      Amen! People pushing telecommuting are playing with fire. Get your bosses used to you being physically there, and they will be less comfortable with managing remote people from the 3rd world. If you act like a closet broom, they will replace you like a closet broom.

    2. Re:If you can telecommute... by Anonymous Coward · · Score: 0

      This is not true at all, fortunately. For one thing, it is a LOT more risky to outsource to For one thing, they are not playing by the same set of rules as we are. Just making sure that your contract is enforceable is a big deal. Then there are the differences in IP law. What if all of your engineers take what they learn in your company to build a competing product? Do you have any recourse? Maybe BOA can do it, but for the rest of us it isn't even an option.

    3. Re:If you can telecommute... by Anonymous Coward · · Score: 0

      Outsourcing != Offshoring. Most of your concerns, plus language issues and major time zone issues, are eliminated by outsourcing within the the US. If the job can be done just as well offsite, you can pay someone in Indiana to do it for less than someone in San Jose.

  29. my company is safe: telecommuting is banned by Anonymous Coward · · Score: 2, Interesting

    The first time my company allowed workers to telecommute, they apparently had some folks who took that to mean they could loaf and not actually, you know, work.

    Some people got fired and management adopted a very strong but unwritten policy that telecommuting was completely disallowed. The telecommuting fallout had happened a couple years before I started working there but management was stil upset by the time I was hired. I learned the hard way when I had to come to work three times in the middle of an ice storm that should have allowed for some flexible remote working. No way.

    The irony is that the regular workers who show up in person at the office spend a lot of the day loafing around, playing computer games, surfing, wandering from cube to cube chatting, and generally not doing, you know, work. Management sees it but doesn't do much about it. But do this on company time where they can't see it? ouch.

    1. Re:my company is safe: telecommuting is banned by Slashcrap · · Score: 1

      The irony is that the regular workers who show up in person at the office spend a lot of the day loafing around, playing computer games, surfing, wandering from cube to cube chatting, and generally not doing, you know, work. Management sees it but doesn't do much about it. But do this on company time where they can't see it? ouch.

      Wow, sounds like you work for a company that has retarded management, unmotivated employees and which really, really, sucks. So, not really the best argument against telecommuting. A good argument against working for shitty companies, though.

  30. The Telcos didn't even pay for the build out... by z-kungfu · · Score: 0, Offtopic

    and they made promises of fibre to the home. Read all about it at http://www.newnetworks.com/scandals.htm Get it straight it's another something for nothing deal for big business...

    1. Re:The Telcos didn't even pay for the build out... by z-kungfu · · Score: 0, Offtopic

      a quick summary... This book documents the largest fraud case in American history The case is simple: Do you have a 45 Mbps, bi-directional service to your home, paying around $40? Do you have 500+ channels and can choose any competitive service? You paid an estimated $2000 for this product even though you did not receive it and it may never be available. Do you want your money back and the companies held accountable? Background: Starting in the early 1990's, the Clinton-Gore Administration had aggressive plans to create the "National Infrastructure Initiative" to rewire ALL of America with fiber optic wiring, replacing the 100 year old copper wire. The Bell companies -- SBC, Verizon, BellSouth and Qwest, claimed that they would step up to the plate and rewire homes, schools, libraries, government agencies, businesses and hospitals, etc. if they received financial incentives. The Commitment: * By 2006, 86 million households should have already been wired with a fiber (and coax), wire, capable of at least 45 Mbps in both directions, and could handle 500+ channels. * Universal Broadband: This wiring was to be done in rich and poor neighborhoods, in rural, urban and suburban areas equally. * Open to ALL Competition: These networks were to be open to ALL competitors, not a closed-in network or deployed only where the phone company desired. * Each State: By 2006, 75% of the state of New Jersey was to be wired, Pennsylvania was to have 50% of households by 2004, California to have 5 million households by 2000, Texas claimed all schools, libraries, hospitals....Virtually every state had commitments. * Massive Financial Incentives: In exchange for building these networks, the Bell companies ALL received changes in state laws that gave these them excessive profits, tax savings, and other perks to be used in building these networks. * This was not DSL, which travels over the old copper wiring and did not require new regulations. * This is not Verizon's FIOS or SBC's Lightspeed fiber optics, which are slower, can't handle 500 channels, are not open to competition, and are not being deployed equitably. * This was NOT fiber somewhere in the network ether, but directly to homes. The Harms and Outcome * Costs to Customers -- We estimate that $206 billion dollars in excess profits and tax deductions were collected -- over $2000 per household. (This is the low estimate.) * Cost to the Country -- About $5 trillion dollars to the economy. America lost a decade of technological innovation and economic growth, about $500 billion annually. * Cost to the Country -- America is now 16th in the world in broadband. While Korea and Japan have 40-100 Mbps at cheap prices, America is still at kilobyte speeds. * The New Digital Divide -- The phone companies current plans are to pick and choose where and when they want to deploy fiber services, if at all. * Competitor Close Out -- SBC, BellSouth and Verizon now claim that they can control who uses the networks and at what price, impacting everything from VOIP and municipality roll outs to new services from Ebay and Google. The Truth: This is a Fraud Case * Fraud: There is a dark secret -- the networks couldn't be built at the time the commitments were made and are still not available. If someone pays thousands of dollars for a service and doesn't get it, isn't that fraud? * Collusion and Cover-up: TELE-TV and Americast, the Bell companies' fiber optic front groups, spent about $1 billion and were designed to make America believe these deployments were real in order to pass the Telecom Act of 1996 and enter long distance. How did every major phone company in America not know that these fiber-based services couldn't be built and were able to defraud over 40 states? * The mergers killed fiber optic deployments in over 26 states and harmed competition. With every merger, the phone companies simply dropped all state commitments and harmed every state they merged with. Case in point: Verizon cut deployments to 13 states during the NY

  31. Microsoft's PR unit by megaditto · · Score: 1

    Here is something for the tinfoil hatters [emphasis added]:

    VA's "Veterans Health Information Systems and Technology Architecture VISTA is the primary repository of clinical, administrative/financial, and infrastructure data in VA. It consists of computer systems at each VA medical center and the national network that links them. Within each VISTA implementation is a large number of separate 'modules' or 'packages' designed to store data on a particular subject and to produce management reports."

    from www.herc.research.med.va.gov/Glossary.htm

    --
    Obama likes poor people so much, he wants to make more of them.
  32. "Telework" is entirely implicated in the VA case by csoto · · Score: 4, Insightful

    "Telecommuting" means working away from the normal office environment. This guy was a "teleworker." Sure, he isn't NORMALLY a teleworker (e.g. he usually works out of the office). But he took work home. He was telecommuting. There would have been little chance of this data being stolen had he not "telecommuted."

    Telecommuting has drawbacks. The number one issue is that the home is not usually a good environment for work. This includes issues of safety and data security. Operations are at risk if you do not take sufficient precautions.

    One interesting solution to this is thin client computing. I've experimented with Sun Ray thin clients that connect over a broadband connection back to a server. No data is stored on the thin client. All it really transmits is pixels and keyboard and mouse clicks (encrypted, too). That's the right way to approach this. Never store data away from the people paid to protect it (then make sure those people do a good job).

    --
    There exists no way of exchanging information without making judgments. --Bene Gesserit Axiom
  33. never happen by ezwip · · Score: 0

    There are tons of security savvy users out there that can't find a decent job. Hell I'm stuck in a mail room and the managers refer to me as a hacker even though I've worked at tons of comp shops. I find bugs in their system and catch people around the office doing stupid crap on their comps all day long. I'd have every pass in this place in less then five minutes because people are morons. They would rather shell out 5 million bucks on a solution that doesn't even work then open the door for intelligent people that actually pay attention to take everyones place.

    What we need to do is export these computer users jobs, put complete morons in their place, sue everyone that breaks in, and put the IT guy on the gas pump for pointing out that we are inept.

    --
    "I guess I'm gonna fade into Bolivian."
    1. Re:never happen by fishbowl · · Score: 1

      You listed at least 6 reasons, plus your general attitude, that ensures if it were up to me, you'd remain stuck.

      Do you honestly believe you have no share of the responsibility for your lack of career development?

      --
      -fb Everything not expressly forbidden is now mandatory.
  34. Think of the rainforest by robertjw · · Score: 4, Interesting

    Really, what is more important, saving the planet or a few million VA records. I think the number one reason to support telecommuting is so people can live in the area of their choosing and still earn a decent wage. Commuting is wasteful of both time and energy. I can't believe the sierra club and greenpeace don't push telecommuting more.

    1. Re:Think of the rainforest by Jerim · · Score: 1

      Wow, man. You should like, be in charge of like the world and stuff.

    2. Re:Think of the rainforest by cfpresley · · Score: 1

      My Wife and I happen to be two of the Veterans whose data was stolen. Not only is your comment insulting to all active duty and retired military, it is ignorant. Do you think that telecommuting has that great of an impact on CO2 reductions? How about increasing the fuel efficiency of vehicles instead, or having people live closer to where they work? When less people drive to work, demand on gas drops, lowering prices, making it less economical to use alternative sources of energy, or improving fuel efficiencies. I'm glad that the people in charge value my privacy more than you do.

    3. Re:Think of the rainforest by robertjw · · Score: 1

      insulting to all active duty and retired military, it is ignorant.

      Believe me, my intention was not to insult any military personnel. My statement is simply that if all the doomsday predictions of the environment, global warming, etc... have any truth at all and if reducing automobile use will curb the coming destruction, the theft of some records is an unfortunate but acceptable loss.

      Do you think that telecommuting has that great of an impact on CO2 reductions?

      Have you seen the highways at 7:00am on a workday? There's a reason they call it rush hour. If automobiles are the primary cause of pollution, and commuting is one of the primary uses of automobiles then it stands to reason that if a large percentage of people telecommuted CO2 emissions would be significantly less.

      having people live closer to where they work

      Isn't telecommuting allowing people to work where they live? How do you get closer than that.

      When less people drive to work, demand on gas drops, lowering prices, making it less economical...

      So we should use more gas to keep prices higher. Not sure I follow your logic there.

      I'm glad that the people in charge value my privacy more than you do.

      Ahh.. but obviously they don't, otherwise your privacy wouldn't have been violated. Security procedures should have been in place. That particular data shouldn't have been taken off site, and if it was it should have been encrypted. The security issue isn't telecommuting by itself, that's just a convenient excuse.

    4. Re:Think of the rainforest by Shadowlore · · Score: 1
      I can't believe the sierra club and greenpeace don't push telecommuting


      Because telecommuting means using technology, and that would be eeeeevil.
      --
      My Suburban burns less gasoline than your Prius.
    5. Re:Think of the rainforest by tacokill · · Score: 1

      "The planet is fine. It's the people who are fucked up" -- George Carlin

    6. Re:Think of the rainforest by cfpresley · · Score: 1

      Have you seen the highways at 7:00am on a workday? There's a reason they call it rush hour. If automobiles are the primary cause of pollution, and commuting is one of the primary uses of automobiles then it stands to reason that if a large percentage of people telecommuted CO2 emissions would be significantly less. Industry is a large contributor to emissions, including shipping via boat and truck. Isn't telecommuting allowing people to work where they live? How do you get closer than that. Telecommuting is an end run around living close to were you work. It allows people to live farther from their employers. It also allows for less accountability, but that is another matter. So we should use more gas to keep prices higher. Not sure I follow your logic there. Whatever mechanism is used to keep gas prices higher will ultimatly lead the market to improving efficiency, benefitting the environment. It doesn't have to be increased consumption, it could be increased taxes, lower supply or more expensive, harder to ship additives like ethanol. Ahh.. but obviously they don't, otherwise your privacy wouldn't have been violated. Security procedures should have been in place. That particular data shouldn't have been taken off site, and if it was it should have been encrypted. The security issue isn't telecommuting by itself, that's just a convenient excuse. They do, because they are investigating it. I am not speaking about the underfunded VA which had lax policies, but the Federal Government. Your attitude of "who cares about the victims when there is global warming" is worse than even the VA's snub to our right to privacy.

  35. Exempt vs. Non-exempt by Anonymous Coward · · Score: 1, Informative

    Employers and managers should be very aware of the potential liability they may incur if they allow non-exempt employees to work from home, where their working hours are difficult to monitor. The law clearly stipulates that non-exempt employees must be paid for all overtime hours worked - whether or not the work was approved or in violation of policy. I'm not saying this is right or good, I'm just sayin'.

    From the Department of Labor website:

    Overtime Pay May Not Be Waived: The overtime requirement may not be waived by agreement between the employer and employees. An agreement that only 8 hours a day or only 40 hours a week will be counted as working time also fails the test of FLSA compliance. An announcement by the employer that no overtime work will be permitted, or that overtime work will not be paid for unless authorized in advance, also will not impair the employee's right to compensation for compensable overtime hours that are worked.

  36. I call shenanigans by Anonymous Coward · · Score: 0
    What can be worth $75M that would be legal to use? I don't doubt that you could have something that cost $75 to create - heh, maybe you work for a movie company and have a single movie on your pc, by the MPAA's reconing, it is $75M.

    Otherwise, what has a real, tangible (i.e. convert it to cash) value of $75M? Some password to an anonymous "Bearer" Swiss bank account?

    1. Re:I call shenanigans by networkBoy · · Score: 1

      "What can be worth $75M that would be legal to use?"

      You must prove it's been used in order to prove it's illegal, and even then you may lose in real life. Also, it must not be a company secret, and rather be patented.
      Such is the life of chip fabrication, that your IP will be stolen, all you can do is attempt to mitigate the impact.
      Real case: A popular networking components company (BRCM) stole one of our repeater designs. We sued, and won. now they can't sell it in the US, but they are still selling them bigtime in APAC.

      -nB

      --
      whois gawk date unzip strip find touch finger mount join nice man top fsck grep eject more yes exit umount sleep dump
  37. POST-time disk encryption by Spazmania · · Score: 1

    The problem is that the data on the hard disks is not encrypted. This is not surprising: most software isn't set up effectively to enjoy the advantages of encryption.

    Let me put that another way: demanding application-level encryption just for the telecommuters is a non-starter. It adds too much to the cost of doing business. It won't happen.

    The alternative would be encryption activated at the BIOS POST. The BIOS' already have an setting to require a password there, but its doesn't really do anything. So, make it do something. Use the password to scramble the hard disk contents. If you reset the password and don't pick the same one, the hard disk contents are unreadable. You can reformat it but you can't recover it.

    Problem solved. Now a thief can steal the laptop but he can't recover the contents of the drive.

    --
    Moderating "-1, Disagree" is simple censorship. Have the guts to post your opinion.
    1. Re:POST-time disk encryption by Anonymous Coward · · Score: 0

      A large number of products such as WinMagic and TecSec do this with varying levels of effectiveness and security.

      In wake of the VA fiasco most agencies are looking at these kind of solutions.

  38. Re:Telecommuting is a cornerstone of geek culture. by Tiro · · Score: 1

    Thank god American football is only shown on Sunday [and Saturday for college, and Monday nights, and some Friday and Thursdays] or else I'd never get anything done!

  39. Re:Telecommuting is a cornerstone of geek culture. by WilliamSChips · · Score: 1

    Ummm....ESPN? Sci-fi channel, yes, but ESPN? /.? Stop kidding me.

    --
    Please, for the good of Humanity, vote Obama.
  40. We'll show those telecommuters...OFFSHORE!!! by kimanaw · · Score: 2, Insightful

    So those uppity geeks think they can sit at home on their tender pimpled asses and draw a paycheck ? Taking our sensitive data home ? Workin in pajamas ? We'll show 'em! We'll send our data and IP to the other side of the planet to folks we've never met, where our laws don't mean squat...and we'll save massive bucks to boot! Yep, that'll larn 'em...

    </irony>

    --
    007: "Who are you?"
    Pussy: "My name is Pussy Galore."
    007: "I must be dreaming..."
  41. This is not about telecommuting by HangingChad · · Score: 3, Insightful

    It's about walking around, in any circumstance, with megs of sensitive information on a portable device that isn't encrypted. Whether it's a desktop, laptop, USB device, external hard drive, PDA, cell phone or iPod. It's really about non-existent data security policies, data security audits of vendors handling sensitive customer and employee data and, above all, it's about no accountability in government or private industry for mishandling sensitive information.

    When companies are liable for millions in damages for lost privacy act data, you'll see change bordering on a religious revival. Until then, it's just the masses whining.

    --
    That's our life, the big wheel of shit. - The Fat Man, Blue Tango Salvage
  42. Use the BUILT IN stuff in your laptop by JFilz · · Score: 4, Informative

    I work at a place where I deal with or work with Telecommuter and is quite the norm. Of these MOST of these people are only part-time telecommuters.

    What I don't understand is why people are not the built in features of laptops - ANY NEWER Laptops have a Power on password. Many newer ones even have HARD DRIVE passwords (so you can't swap out the drive to use it on another PC). Some even are coming with THUMB readers. Prevent thiefs - ALL laptops have docking stations or cable slots where it can be LOCKED down. If not locked down and not in use then put it in to a LOCKED cabinet. Also to NOT have it in the open cab of car (put it in the trunk - for the smash grab and dash thiefs) - also not good if it hits you in the back of the head in an accident..... Use a BREIFCASE or BACKPACK or CARYBAG that does not scream "I GOT A LAPTOP FOR YOU TO STEAL!" (these are all actual policies where I work).

    Also you can secure your Email by always accessed it via VPN and by using IMAP based or HTTPS web based (and/or require RSA token access). Any Local "copy" in the email client is encrypted (We use PGP? or such). I don't telecommute - but I personally only use IMAP (when at work) or WEB BASED email clients (ie: Squirrelmail and such) for the last 12+ years. No chance if SOMEONE steals my PC and tries to look at my MAIL - I don't even have a PC based mail client (no spam bot using POP3 on MY email account - unless they use there own client-but then I have that port BLOCKED on my personal firewall). In 12 years I have not got infected by even ONE virus by email (I get a "hit" every couple of weeks with one - but getting fewer)...My ex-wife however insist on using a pop3 client and has gotten infected many times.

    Also setup most business applications such they can be used via VPN and a local client or has a web based interface and/or Citrix/Termial Services or VMWare or such. Also provide Backup space on their servers for your "EXCEL" and "WORD" type of documents. A hot sync Software tool make this easy.

    One big thing is adopting a software policy - ONLY install APPROVED software on any BUSINESS PC - no personal software or "free downloads" or demos. As well only approved "accessories" may be attached/used (ie: Thumb Drives and External drives etc). And by approved - I mean not by some "know nothing" boss or supervisor - but approved by IT and/or management who is in touch with what is acceptable and is safe to use. After all this is not your personal PC but own by your employer's. (like the "scattered" or "found" USB drives that was used at one BANK location - most was picked and pluged into the BANKS PCs by there own employees.)

    Where I work they also PUSH all virus/spam/firewall and security fixes so your always up to date. They also adopted a PASSWORD policy where you have to change password often and not duplicated etc....

    With a GOOD policy and ENFORCING it to protect everyone's butt and with a bit of free software and/or a bit of spending of money/time - a Stolen Laptop could means little to NOTHING in impacting a business - with the biggest being the replacement cost of the laptop and going though and wiping out and resetting any and all of the user's passwords (in case people "keep" a list of passwords on the PC or use "auto complete" or other password reminder tools....) and yes I now there is secure "password" tools out there that would be hard to defeat - at lease before they able to crack/hack it to it - you should have all you password reset.

    A stolen laptop that causes problems for a business - they had set them selves up for failure to begin with - however the one of the WEEKEST parts is the employee them selves. It costs very little to make a POLICY, and to make minor changes in how people use there PC. Just remember to enforce it (MANUALLY spot checking if you have to - even "leak" out a rumor that it will happen before you do - I can just hear the hard drives going crazy when that gets around....), if you don't - a policy on paper means zilch (nothing) if people are not following it.

  43. Tele-slacker by Anonymous Coward · · Score: 0

    Sorry guys that is the plain truth. I used to work in a research department. Much of our work could be done from home. Despite that, the most productive people showed up each day. They were the ones who were interested in doing more, interested in helping somebody else, interested in the big picture. The people who were always trying to work from home were just lazy. I ended up doing their work. After a while I got tired of doing their work without extra pay so I moved on. I now happily work in an office where we do our work at the office and then go home and have a life.

  44. everybody? by alizard · · Score: 2, Interesting

    I've been writing IT articles since 1987. In those 19 years, I've visited my publisher's office exactly once and I've met exactly one of the editors I've worked for.

    1. Re:everybody? by peterpi · · Score: 1

      The fact that that is so unusual and interesting more or less proves the point being made.

  45. Re:"Telework" is entirely implicated in the VA cas by solitas · · Score: 2, Interesting

    I can remember the only time a company let me telecommute: I broke one leg, the other knee, and shattered a hip in a car accident, and they gave me an LA-36 Decwriter II, an acoustic-coupler(!) modem, had an extra phone line put in during my convalescence, and whenever I needed paper or ribbon I had them the next morning.

    "Encryption", as such, consisted of mixing-up the data lines on the parallel-side(s) of the UARTs (8!=40320, back then they thought _that_ was hot sh*t; but I thought that was a pain in the *ss because I could only talk to the one modem at work and nothing else).

    Good times though (except for the medical).

    --
    "It's time to take life by the cans." ~ Bender ("Bendin' in the Wind", ep. 3-13)
  46. Because by XanC · · Score: 1

    Groups like that aren't actually interested in the environment; they're interested in increasing their own power and importance.

  47. Looser! by Anonymous Coward · · Score: 0

    There are tons of security savvy users out there that can't find a decent job. Hell I'm stuck in a mail room and the managers refer to me as a hacker even though I've worked at tons of comp shops. I find bugs in their system and catch people around the office doing stupid crap on their comps all day long. I'd have every pass in this place in less then five minutes because people are morons. They would rather shell out 5 million bucks on a solution that doesn't even work then open the door for intelligent people that actually pay attention to take everyones place.

    Maybe you're an example of the Peter Principle.

    Honestly, there are probably millions of guys like you who swear that they know more than the imbeciles running the company, but nobody will listen to them because they want a degree or some TLA or FLA after their name. But, hey, you can't be bothered to get a degree or a certificate because you already know a hundred times more than anybody who could possibly teach you anything. The world should be beating a path to your door because you have all the answers...but no, you're stuck in some shitty job in the mailroom. They just don't see the value that they're passing up! You could save the company millions if they'd just listen!

    But the truth is that management isn't interested in some pot smoking delinquent who graduated from high school with a 1.5 GPA, doesn't know what a bar of soap is and who has to be told five times a day that all of the interoffice mail needs to go in the slots, not just half of it. Management isn't interested in a guy wearing baggy pants and a ripped up t-shirt and dirty combat boots. And none of your coworkers want to hear about how much better things would be if you were running things.

    Face it, you don't have the responsibility to finish a project that you start. That's why you never went to college - you couldn't hack DeVry's or ITT for crying out loud.

    You should be happy you have the job you have. Get over yourself.

  48. Re:hogwash! That is a security issue, not slave is by lotrtrotk · · Score: 2, Insightful

    ORRR.... The problem is having a flawed Corporate Management who will not supply the IT/Network group with the proper resources (budget/training/personnel) to IMPLEMENT proper IT/Network Security policies.

  49. UN Inspectors better find him fast... by patio11 · · Score: 1

    ... because he won't have them for long.

  50. The guy wasn't even supose to have the data by jpferry · · Score: 2, Informative

    This was not a telecommuting problem at all! This guy was not even supose to have the data on his laptop in the first place! He violated policies by taking the data home on his laptop Go back and reread the stories about what happened.

  51. Bingo! by NihilEst · · Score: 1
    "It's the Luddite mentality that we need to change."

    There, in a nutshell, is everything wrong with the state of our industry. Now, if only we knew how to do it, we'd be all set. No more asshats stealing data, no more PHBs making our lives difficult. Naaaah, won't happen.

    --
    Founding member: He-Man Windoze Hater Club
  52. Another new-age crusade by Jerim · · Score: 1, Flamebait

    "It's motivating the middle managers, teaching them a new way of doing work."

    For hundreds of years, America has done just fine with people getting up at a certain time each day, and gathering at a particular place to do work as a group. I am tired of these new-age hippies with their "let's redefine work" attitude. We don't need to be taught a "new way of doing work."

    If telecommuting was such a great idea, productivity would be up, and every company would be rushing to send their workers home. At best, telecommuting is only as good as being in the office, and at worst, it is less productive. In no way shape or form, is it "better" than being in the office. (Better for an employee who doesn't want to come into work, sure. Not better for the company as a whole.) Telecommuting is good in a some situations, like when your child is sick and you need to stay home that day. However, it is not an everday solution.

    Why do people seem intent on shoving telecommuting down our throats as the greatest way of working? It does not increase productivity. It does not save costs. It does not lead to lower stress and thus higher profits. It just doesn't work that way. It is hard to get work done when Steve isn't responding to your emails. However, if you were in the same building as he is, you could go finding him in accounting flirting with the new receptionist and get your work done faster. Google, Apple and any other "open minded" company you want to name all require you to come into a particular building at a specific time.

    I am going to propose "non-work" as the next big working craze. Not working increases employee happiness, thus leading to better productivity, which leads to higher profits, obviously. A non-working environment leads to greater harmony among employees.

  53. There is none. by Kadin2048 · · Score: 2, Informative

    Shhhh, you're destroying the manufactured controversy.

    In reality, nobody is pointing fingers at telecommuters -- in fact, in the incidents that I've heard in the news lately, there wasn't any real "telecommuting" going on. Somebody just copied an assload of data off of the server to their local machine, and then took the machine home with them. I'd call that 'working from home,' not 'telecommuting.' And the copying of the data onto the local machine was just inappropriate to begin with. That's mostly a user-training issue and not a technological one.

    Sure, there are measures that could have been put in place to allow the behavior to happen without creating such a huge problem in the event the laptop was stolen: the drive could have been encrypted, etc. But ultimately, if you don't train your employees to follow the security procedures, there are always going to be problems. (Use encrypted HDs and don't tell people not to use USB sticks, you're going to get data loss. Say 'no USB sticks,' and they'll use CD-RWs. Or email. Or whatever. My point is, the problem at that point is not technology, but your users.)

    I doubt that the data loss events will cause anyone who's legitimately telecommuting or even working from home to do anything differently. The only thing it should do is serve as a wake-up call to managers who are allowing employees to do things that they're not really supposed to do (like take large amounts of sensitive data home with them). In the long run, it'll probably make the new encryption features in Win Vista more popular, but that's neither here nor there.

    All in all, I think the controversy was manufactured. It was obvious enough to anyone watching on CNN that the fault of the VA incident lay with the employee who took the data home on the laptop when they weren't supposed to; it wasn't a failure of some telework scheme, just user error / bad judgement.

    --
    "Ladies and gentlemen, my killbot features Lotus Notes and a machine gun. It is the finest available."
  54. Oh well. by rmadmin · · Score: 2, Interesting

    This is very interesting to me. I work for a company that provides financial software. Our security is almost non-existant. I'm about the only person who could impliment any serious security, but it has been put to the bottom of my priority list by the boss. Makes me sick sometimes. Anyone that has worked for our company, or even one of our customer's companies, could EASILY rip someone off pretty bad. Not to mention completely fubar a load of businesses in one shot.

    Maybe I should force feed some of these articles to my boss. :)

  55. Fear my Google-Fu by SkiifGeek · · Score: 1

    Okay, so how's life working for an ILEC? And, how's the Dell 8100 holding up?

    Let's just say there are enough breadcrumbs to follow to determine:

      - Family status
      - State, City
      - Interests
      - Reasonable initial estimate at real name and ethnicity

    It could probably go a lot further than that, but I stopped there. The point is that if you have been online long enough, you will leave a trail that can be followed through the Internet mists, even if you only use a nom de guerre.

  56. Hooray for non-work! by ockegheim · · Score: 1

    Part-time work (on a reasonable hourly rate), part-time non-work, and a curbing of one's unnecessary material urges is an excellent lifestyle.

    --
    I’m old enough to remember 16K of memory being described as “whopping”
  57. Teaching middle management is futile by Opportunist · · Score: 1

    Middle managers can't be bothered to learn, that's at least my realisation. Why should they? They're squeezed into the ulcar position of having the responsibility but not the freedom of decision.

    Just shoot them and put them out of misery. It's more mercyful.

    --
    We used to have a Bill of Rights. Now, with the rights gone, all we have left is the bill.
  58. Outsourcing services by Aceticon · · Score: 2, Insightful

    Actually outsourcing of services is just the natural extension of telecommuting: stuff that can be done remotelly for $X hour by somebody a couple of miles away can just as easilly be done for $Y hour (were Y < X) by somebody thousands of miles away.

    In other words, anything that can be done remotelly is just as suitable for telecommuting as it is for outsourcing, since in it's simplest form outsourcing is just having your workers telecommute from a far place.

    The point here is that anything that does not require the worker to be physically onsite always or often will end up being outsourced and that the great telecommuting revolution that some still seem to expecting has already been overtaken by the even greater outsourcing revolution - forget about working from a paradisian island for western wages, at this point the best one can aim for is telecommuting a couple of days a week.

  59. We are happy about this ! by RedneckJack · · Score: 0



    All of us executives are very happy that telecommuting is getting a black eye. We want you in the office and while you are here, you better be in your dress slacks, dress shirt and dress shoes, not jeans, shorts, t-shirts or sweatshirts, or sandals. We insist that you are here during normal business hours of 8am to 5pm. We don't care if you have to fight traffic not be able to get home until 6pm and have no time to enjoy the outdoors. That is for weekends only if we permit you the weekend off. It is also about politics as well. If you are at home working, you will miss out on our politics and games.

    </sarcasm>

  60. Our computer security priorities are screwed up by jocknerd · · Score: 1

    At my current job, we lock down access in and out of our firewall. The only way in is through VPN. No SSH, even outgoing, but not really necessary since 99.9% of our hardware runs either Netware or Windows. But after all this security, we don't do a thing on the PC's except run Anti-virus and Anti-spyware. Yet we standardize on IE and run no encryption whatsoever. I was told I couldn't even bring my MacBook Pro into work for fear of putting a virus on our network. But yet, as I said, we don't make Firefox a required browser. In fact, I may be the only person in my I.T. department who actually uses it. Pretty sad.

  61. OT: Wow, you're an asshat. by VE3MTM · · Score: 1

    Typing someone's username into Google and following the second link doesn't mean you have 'Google-Fu'. Making it sound like you have all sorts of personal info means you're a moron.

    --
    09 F9 11 02 9D 74 E3 5B D8 41 56 C5 63 56 88 C0 Whoops, silly middle mouse button...
    1. Re:OT: Wow, you're an asshat. by networkBoy · · Score: 1

      Funny. There appears to be another networkBoy out there, but he does not capatalize the B....
      I would be the first link in google thankyouverymuch.
      Also, While I do not work for a CLEC I have Telecom experience. The CLEC's call the manufacturer who calles me (well my office, but I want to feel like more than a tooth on a gear on a cog...) when shit breaks.

      The moniker networkBoy was because I was hacking network PHYs back when 100Mbps was the super duper holyshitthat'ssofast networking interface and if you told anyone in my industry that there would be 10Gbps available in a single 4 pair bonded channel available for under a grand by 2005 they would have hit you for being a dumbass.
      I left the industry after the successful launch of our 10 gig product family (PHY, MAC, NP) as I was simply burnt out. Now I do maintenance in a wafer probing lab. Much simpler life and I can't take my work home with me as it weighs to bloody much (nevermind the allignment procedure).

      Cheers,
      -nB

      --
      whois gawk date unzip strip find touch finger mount join nice man top fsck grep eject more yes exit umount sleep dump
  62. Re:officially done. by Anonymous Coward · · Score: 0

    Duh, you forgot to properly fellate Linux/OSS/other bastions of glory for the unshowered unshaven /. crowd as your first 108973423 posts so that you don't get bad karma.

    blah blah M-Dollar-Sign blah blah Open Source blah blah GPL FTW blah blah Anime Tentacles

    There, that'll fix things right up.

    Captcha on post involving eFellatio = 'tongue'

  63. Indirect Social Security Numbers by Anonymous Coward · · Score: 0
    Eric Smith wrote: There's no good reason why a laptop taken home needs to have private information about customers/patients/clients/etc. on it. The customer data can be kept on an enterprise database server that is less susceptible to theft or to being accessed from insecure networks. The telecommuting employees can access the data remotely via an encrypted VPN, or use Windows Terminal Services, VNC, SSH, or the like over the VPN.


    In addition, if the laptop does need to have private information on it, perhaps it would be good in the future to provide an extra layer of indirection. Intead of having the exact social security numbers, have an index number that points to the correct record; later when the laptop needs to be re-synched to the main office computers, the information can be updated.

  64. Oh crap by Rob+the+Bold · · Score: 1
    Oh crap, I shouldn't have said he's a customer. Oh crap, I shouldn't have said it's a secret. Oh crap, I definately shouldn't have said it's illegal.

    It's too hot today.

    --
    I am not a crackpot.
  65. The problem is often bad telecommuters. by AugstWest · · Score: 3, Insightful

    I've been told by many managers that they've tried it, and people just flat-out blow off work when they're home, and productivity drops.

    I've had several jobs now where telecommuting wasn't allowed at all, by company policy.

    Every once in a while I would have an "emergency," like a repair on the house, or a delivery of furniture, or whatever, and I would tell my boss that I would have to be at home, but that I would still be working. One time it was a Unix admin position, so it could be done from anywhere, especially since many of the servers were colocated or managed. Another time it was doing technical support for java deveopment teams for a major Swiss bank.

    So you tell your boss that you can't be in the office anyway, so you'll do some work from home. Then, while you're home, kick ass. Get tons of stuff done. Most people in an office kick back and do the minimum amount of required work, so it isn't hard to show how productive you can be when working from home. Do it off and on, maybe when you're sick, maybe when you have a child emergency, whatever, but if you can come up with a legitimate excuse to be home, take it, and work your ass off.

    A lot of times your manager will see that you're a very productive worker, and through some simple tactics you can work out a situation where you can increasingly avoid having to commute. I had an hour and a half train commute each way to the swiss bank gig, so it was worth doing some extra work to be able to sleep an extra hour and a half on occasion, and even if I worked an extra half hour at night, I was still done with work and home an hour earlier.

  66. Meh by SkiifGeek · · Score: 1

    Uh, I came to that conclusion without the help of Google's second link. Just because Google lists it, doesn't mean it's relevant. How certain are YOU that Google's second link is our original poster?

    The original poster was claiming safety because of his technological boundaries that were anonymising his location, but it was worth pointing out that the same technology anonymising his location could be used to find out a huge amount of information about them.

    Now, I stopped looking before I got to the personal info - publishing that wasn't going to prove my point any further. Plus, Google isn't the source to turn to for that - it was a breadcrumb buried deep in a forgotten part of the web which gave that clue. I was pointing out that the clue did exist and the dedicated researcher can find it if they have the patience.

    Asshat or not, that's what it takes, and it's what people do - there's no need to descend to name calling.

    1. Re:Meh by networkBoy · · Score: 1

      My claim was never to be hiding my personal info &&|| location, but rather that I was buried behind a mountain of security because of my work.

      Also I do not implicitly link my employer, my name, and my handle all together on-line. Enough detective work and you can put it all together, I routinely do that, just to guage my "footprint". In fact the reverse lookup nB -> _real me_ is less worrisome to me than _real me_ -> nB, as that could hurt employability ;)

      -nB

      --
      whois gawk date unzip strip find touch finger mount join nice man top fsck grep eject more yes exit umount sleep dump
    2. Re:Meh by aminorex · · Score: 1

      Just remember Orwell's vision of the future of mankind as a boot endlessly stomping on a human face. In the long run, we're all slaves. At least your great-grandparents were free, once.

      --
      -I like my women like I like my tea: green-
  67. Thanks for the response by SkiifGeek · · Score: 1

    Thanks for the response, I was concerned that you might not have realised how simple it can be to track someone down.

    I know you are link #1 on Google (it is in your header on /., after all). Although your site (and subdomains) don't carry a lot of personally identifying information, and I doubt you are trying to spam mobile phone forum boards (as another networkboy does), you have left personal information out in the open in the past which can be correlated with your posts on /..

    Unfortunately, a lot of the ability to track down personal information is the result of people / agencies who have been entrusted with that information not being able to secure it effectively - just ask your nearest vet if they are full of love for the VA Department at the moment.

    1. Re:Thanks for the response by aevans · · Score: 1

      "just ask your nearest vet if they are full of love for the VA Department at the moment."

      Which is credible evidence that it was just a publicity stunt designed to lower morale among active duty soldiers and influence retired Republican voters.

  68. No Business by RuneSpyder · · Score: 1

    If you need to put people's personal information on a laptop so you can telecommute and watch the Price is Right simultaneously, you have no business telecommuting.

    1. Re:No Business by skipperjohn · · Score: 1

      I don't care who telecommutes, as long as my personal data is never stored or accessed by the telecommuter. If I find that my personal data has been compromised by someone who wants to work at home, but is responsible (either directly or indirectly) for the loss of my data, I will sue the company that hired that person, that person's management, and that person. I believe that I would have a very good case of negligence. I'm not sure why the courts aren't filled with such cases now.

      There is never a need to put my personal data on a PC in someone's home (other than mine). Why is this permitted by any responsible management?

  69. Just another day for a Chicago thief by vinn01 · · Score: 1


    Stealing from a cop car is no big deal for a Chicago thief. I've seen where thieves took the light bar off the roof of a cop car. I bet it took them a whole ten seconds. Then they ran into the housing project to hide.

    I bet plenty of the police car computers have been stolen.

  70. But it would be crappy encryption by Anonymous Coward · · Score: 0

    It would only be as good as the length of the password (since you are proposing if you chose the same password it would use the same encryption). So I could crack it in a hour or so of time!

    -nosebreaker.com

    1. Re:But it would be crappy encryption by Spazmania · · Score: 1

      1) 40 characters is sufficient to generate a 256 bit key directly.

      2) You don't have to generate a key directly. Given that you'd want to accellerate the process through the IDE controller anyway, you can store the much longer key in the hardware there and use the password to unlock it. Rig a time delay measured in clock cycles before you can try again on a failed password and you won't be cracking it any time soon, even with only 8 characters.

      --
      Moderating "-1, Disagree" is simple censorship. Have the guts to post your opinion.
  71. Publicity Stunt? by SkiifGeek · · Score: 1

    Surely compromising the privacy for almost 10% of the nation, and that percentage being those that have served the country on the field of battle (as far back as WWII), would be more of a career limiting move than a voter influence program.

    There are plenty of concerning aspects to the VA breach, and it would be really sad if that was the case.

  72. Re:hogwash! That is a security issue, not slave is by v3xt0r · · Score: 1

    agreed! =)

    --
    the only permanence in existence, is the impermanence of existence.
  73. actually... by alizard · · Score: 1
    I doubt that this is all that uncommon among free-lance writers. If all an employer has to know about you is what kind of content you can supply, and you've been around long enough to have a batch of article clips to point editors at to see what one's work product looks like, the only relationship one has to have with an employer is ... article assignment, send article in by deadline, (eventually) get paid. One either provides one's own motivation or gets the hell out of the business.

    Actually, the biggest change technology has made here is... one ships electrons instead of paper. The first few articles I wrote I sent to editors via snailmail.

    Though I was telecommuting to an engineering gig before that... I woke up one day (1985, I think) and realized my MacPlus was essentially identical to the office systems and so was my CAD software (this was the early days of ECAD on Mac... I was a beta site for one of the first vendors), why was I commuting? So instead of uploading to the LAN, I was uploading to the office BBS setup with my new 1200 baud modem.

    My first virtual company experiment was shortly thereafter.

  74. the VA employee wasn't a telecommuter by ltruex · · Score: 1

    If I'm not mistaken, the VA employee whose laptop was stolen wasn't a telecommuter, he simply brought his work home one night. Who hasn't done that? I find it facinating how people take an isolated incident and some how blow it up to emcompass a whole lot more. If it was stolen from work would working onsite be bad? Leslie