Slashdot Mirror


Young Employees Pose Increasing Risk to Networks

buzzardsbay writes "Baseline is reporting on an upcoming survey from Symantec and Applied Research-West that confirms many suspicions about the generation gap in the workplace, namely that younger workers will use your corporate network to run most any device, technology or social networking software they can get their hands on. Dubbed "Millenials," these workers born after 1980 are nearly twice as likely to use cell phones and PDAs at work, and half admit to installing unauthorized software on their employer's computers. On the upside, the Millenials are more security aware than their older co-workers."

65 of 710 comments (clear)

  1. they need to protect their networks by k3v0 · · Score: 5, Insightful

    isn't it the company's responsibility to control their network?

    1. Re:they need to protect their networks by SatanicPuppy · · Score: 5, Insightful

      Having a company adequately secure their network would cut into symantec's bottom line, so, from their perspective, no.

      --
      ad logicam Claiming a proposition is false because it was presented as the conclusion of a fallacious argument.
    2. Re:they need to protect their networks by tattood · · Score: 5, Insightful

      isn't it the company's responsibility to control their network?
      It's also about educating the employees more than anything IT can do to protect the network. If I can call one of your employees and pretend to be the remote helpdesk, and say that I need your password so I can install some software on your computer, and they give me the password, I am in your network.

      It's called social engineering, and if you are good at it, you can get past ANY network or software based systems.
      --
      WTB [sig], PST!!!
    3. Re:they need to protect their networks by Verteiron · · Score: 5, Insightful

      And that's a great idea, until you end up with a piece of required software that refuses to run without local admin privileges on the computer...

      --
      End of lesson. You may press the button.
    4. Re:they need to protect their networks by Verteiron · · Score: 4, Interesting

      Or an admin who has looked up the file and registry permissions required to run the shoddy software (shoddy, yes, but also provided by manufacturer and the only way to do business) and found that said software requires the admin to essentially open up the entire HKLM branch anyway, thus granting local admin privileges available in fact if not in name. Welcome to the wonderful world of car dealerships.

      --
      End of lesson. You may press the button.
    5. Re:they need to protect their networks by vertinox · · Score: 4, Insightful

      If I can call one of your employees and pretend to be the remote helpdesk, and say that I need your password so I can install some software on your computer, and they give me the password, I am in your network.

      Which is why you mitigate how much damage a single person can do.

      So if you do get a password of a normal user in a corporate office, all can do is read their mail and delete their home directory. If their machine was properly locked down, you won't be able to install anything either and if their password expires in 60 days you got that long to harass them.

      Yeah... Your employees will complain they can't get anything done because they can't install programs or save files on the network or modify databases as they would like. At the same time, you have to put in procedures that minimize damage if a IT person is socially engineered such as not even let them look at existing password and temp ones have to changed on login.

      This technique also is useful for rogue employees who plan on going postal with your companies data.

      --
      "I am the king of the Romans, and am superior to rules of grammar!"
      -Sigismund, Holy Roman Emperor (1368-1437)
    6. Re:they need to protect their networks by OnslaughtQ · · Score: 3, Funny

      While the parent has been modded offtopic, I really think we need to give this comment more credit into its deeper meaning and how it relates to the article. I think the AC clearly intends for "Fuck the Chinese government!" to mean that there needs to be more penetration testing of networks. I'm not entirely sure what he meant by "Free Tibet!," however. I think it might mean to let our packets go, that they do not need to be mangled anymore. So, clearly the AC was not offtopic, probably just a bored author dying to make a metaphor between novels.

    7. Re:they need to protect their networks by guy-in-corner · · Score: 5, Insightful

      I'm a C++/C# developer and I've been running in a normal account for over two years now. It's no biggy. I do need to elevate to local admin occasionally: I keep another session open (either with Remote Desktop or Fast User Switching).

      Granted, we're specifically discussing locking down the local admin account entirely. My point is that if more developers took the time to run without admin privileges, we'd see a lot more programs that didn't ask for admin rights unnecessarily.

    8. Re:they need to protect their networks by someme2 · · Score: 5, Interesting

      It's also about educating the employees more than anything IT can do to protect the network. If I can call one of your employees and pretend to be the remote helpdesk, and say that I need your password so I can install some software on your computer, and they give me the password, I am in your network.

      In other news:

      "That's not our problem", says area CIO. "Our problem is educating our helpdesk, that if someone calls and says he's an employee and needs a new password for his account, they shouldn't just give out a password without further identification. "

      Seen it happen in three companies in the last 5 years. Each company with more than 2000 employees & one of them a fortune-500 company.
      --
      You can attach boosters to anything. It just costs more. -
      Anonymous Coward on Sunday November 07, @12:26PM
    9. Re:they need to protect their networks by SoonerSkeene · · Score: 5, Funny

      I work for a certain convergent outsourcing company which converges with converging technologies to provide a ... okay I've taken this too far: I work for Convergys. Every user on their network is an administrator. Every. Single. One. We have 1200 or so employees at my site alone, and we've got over 70 sites in the US.

      They use group policy security to control the network, but you wouldn't believe how little thought goes into it. We had a new team form to provide support for a certain now-defunct pacific-coast city's municipal wifi. Because supporting an internet service sometimes requires tools such as ping/tracert/whatever -- they gave us a command prompt. But because they didn't want us having all kinds of access, what they really gave us was a shortcut to a batch file, which started with a choice prompt, allowing you to 'paste' so-to-speak, several commands, such as it would not let you have a blank prompt. It would always have a command, such as C:\>ping .

      Well apparently no one told them that you can concatenate commands. We soon discovered we could just use the batch file to C:\>ping google.com & start cmd and have an unrestricted command prompt. And since we're all administrators, we can use MMC, and control every other part of our access.

      I've since moved past my call-taking days, but I still work for them as an analyst. Of course they still won't let me provide any kind of network security device.

    10. Re:they need to protect their networks by Nimey · · Score: 4, Funny

      Fucking brilliant. The batch file idea requires that the password be in the .bat for all the world to see.

      --
      Hail Eris, full of mischief...

      E pluribus sanguinem
    11. Re:they need to protect their networks by Danny+Rathjens · · Score: 3, Informative

      That's why the ol' security maxim of basing authentication on "something you have and something you know." a.k.a. multi-factor authentication. It's a lot harder to social engineer something they have away from someone.

    12. Re:they need to protect their networks by Screen404-O · · Score: 3, Informative

      Try SureTrack, Digger, Or P3. also a lot of old digitizer software.

    13. Re:they need to protect their networks by jimicus · · Score: 3, Insightful

      If a piece of software needs admin privileges for no obvious reason will have lost me (and all the PCs I control) as a customer, at least until they fix their act.

      If you come to an employer which has already invested many man-hours in training to use such software and many thousands on licensing it, then you will have no job.

      If your employer comes to you and says "Make this piece of software work, we need it for the business" and you refuse because it needs admin privileges, sooner or later (probably sooner) you will have no job.

      The role of IT is to make something work. If that means ugly hacks, firewalled subnets or other measures in order to mitigate the idiocy of some commercial piece of software, 9 times out of 10 that's less work than re-engineering the business around some other piece of software.

  2. What about the other half? by ccguy · · Score: 4, Insightful

    half admit to installing unauthorized software
    I assume the other half:
    - Do it but don't admit it
    - Or don't it but are way less productive than their peers

    I don't know how it is for the rest of the slashdot crowd but almost everywhere I've worked it's impossible to be (decently) productive using only authorized software.

    The sad thing is not a matter of cost, but a matter of paperwork. Something as basic as winrar (no, let's not go into why would I want to use winanything) is impossible to get by the official channels.
    1. Re:What about the other half? by Smidge204 · · Score: 4, Informative

      Interesting how you say that "installing unauthorized software" = "more productive"

      I'm willing to bet that the vast majority of "unauthorized software" are things like chat clients, media players, RSS/Weather update notifiers, games and software for personal devices (iTunes etc).
      =Smidge=

    2. Re:What about the other half? by digitig · · Score: 5, Insightful

      I assume the other half:
      - Do it but don't admit it
      - Or don't it but are way less productive than their peers

      I don't know how it is for the rest of the slashdot crowd but almost everywhere I've worked it's impossible to be (decently) productive using only authorized software. Quite. I remember being employed to do software development when there were no programming languages included in the approved software, because the people who drew up the approved software list had never bothered to ask the business areas what they did with their computers. I never did get any languages approved, but I did get them to lift my authorisation level so I could run executables that weren't on their heavily locked-down desktop, which was all it took. The company bought the C++ compiler I asked for, and I installed and used it -- unauthorised.
      --
      Quidnam Latine loqui modo coepi?
    3. Re:What about the other half? by plague3106 · · Score: 3, Insightful

      Why do you assume that? Never crossed your mind that the other half don't, but are just as productive (or more so)? Maybe the other half can learn to use the authorized software instead of being so tied to one particular program and can't be bothered to learn something new.

    4. Re:What about the other half? by Compholio · · Score: 4, Insightful

      Firefox, SSH, VNC, .... Not to mention that a lot of tech support happens over IRC and IM.

    5. Re:What about the other half? by poetmatt · · Score: 4, Insightful

      You know, they were pretty darn accurate.

      At my work, the things I install "unauthorized" for myself and my coworkers which are 100% productivity:

      Firefox
      Phrase Express (text macro program)
      Stardock
      Microsoft Powertools/toys (the one that gives you a screenshot of each app when you alt+tab).

      None are "approved" but all the techs approve of it, because they know better.

      None of them use any of what you mentioned. No RSS readers, no games, no funky screensavers, no weather spyware shit. Work is laid back enough to not care (many people just browse the web all day, I mean cmon I'm replying on slashdot), but most people don't push the slacking that far. Also, we're an enormous multibillion $ nonprofit corporation and what I am telling you is like...hmm, well its a worldwide company with thousands of employees. I've talked to the CEO and even he has admitted to having a preference for firefox over IE for example, even though the CIO hasn't officially or formally approved it.

      I don't mean it to be ad hominem on this, but I will say you are making a pretty general bias here that is pretty generally not accurate.

    6. Re:What about the other half? by SatanicPuppy · · Score: 3, Insightful

      Firefox: If places don't allow multiple browsers, thats their own fault. Just stupid.

      VNC: If it's needed for the job, I'd have it installed, or some other similar remote management program...VNC isn't all that feature rich. You'd probably need NAT for that as well, and you ought to run it through a tunnel. Otherwise, I am the firewall gestapo. I open ports for no one, and if you try to local proxy all your traffic out through 80 I will notice.

      SSH: See above, except for the tunnel part.

      The worst type of user is the tech guy who doesn't work in IT. They always think they know better, they have a massive attitude, and a huge superiority complex. If you can prove to me you know your shit, I'll give you some leeway, but that leeway is probably just having your box dumped out into the DMZ, and you screw it up, you fix it.

      --
      ad logicam Claiming a proposition is false because it was presented as the conclusion of a fallacious argument.
    7. Re:What about the other half? by ccguy · · Score: 3, Funny

      Never crossed your mind that the other half don't, but are just as productive (or more so)?
      No.

      Maybe the other half can learn to use the authorized software instead of being so tied to one particular program and can't be bothered to learn something new.
      OK OK, I'll give notepad another chance for my code editing, and I'm sure I can come up with two decent .bat script to launch the compiler and so on... More good ideas? Email them all to ccguysboss@gmail.com :-)
    8. Re:What about the other half? by Guspaz · · Score: 3, Insightful

      and software for personal devices (iTunes etc).

      I'm more productive when listening to music (blocks out outside noise). I've worked at places where my bosses have SUGGESTED that I get a pair of headphones and listen to music at work. If anything, iTunes should make an employee MORE productive by helping them get into the zone, and less prone to distractions.

      The same thing applies to media players, assuming they're used for audio and not video. Anyone suggesting that such things makes employees less productive has obviously never worked for a software development company/department.

    9. Re:What about the other half? by haystor · · Score: 5, Funny

      "They always think they know better, they have a massive attitude, and a huge superiority complex."

      They?

      --
      t
    10. Re:What about the other half? by plague3106 · · Score: 4, Funny

      No.

      Ahh, a self important ass that believes his world view is the only correct one. Gotcha.

      OK OK, I'll give notepad another chance for my code editing, and I'm sure I can come up with two decent .bat script to launch the compiler and so on... More good ideas? Email them all to ccguysboss@gmail.com :-)

      Ya... because it's either VIM or notepad. Well have fun installing all the crap you think you need, I need to get back to doing actual work.

    11. Re:What about the other half? by aclarke · · Score: 4, Insightful

      If you can prove to me you know your shit, I'll give you some leeway, but that leeway is probably just having your box dumped out into the DMZ, and you screw it up, you fix it.
      Yeah, way to go. Great idea. So when your "clueless user's" box in the DMZ is pwned and your boss' boss' boss and the company lawyers are wondering how the competition knows the quarter's sales number before they're announced, you can complain about how stupid the user was for not being able to secure the box that you put out in the DMZ.

      Good luck with your job.
    12. Re:What about the other half? by hobo+sapiens · · Score: 5, Insightful

      "installing unauthorized software" = "more productive"
      False dichotomy.

      Where I work, the company standard IDEs for web development are Dreamweaver or Eclipse. Both are completely unacceptable. Yet, a F/OSS text editor like jEdit is nonstandard but allows me to be much more productive. Why? Because it allows me to work quickly. I have all of the powerful text editing tools of an IDE without the extreme overhead.

      Also, as someone else replied, Firefox and certain plugins like Firebug and the Tidy validator are critical. I am a web developer, you see, and IE's ultracrappy javascript debugging capabilities are not even worth considering (even with the insanely useless MSFT Dev Toolbar installed). Profiling AJAX calls, or ANY HTTP request, is impossible without a tool like Firebug. And they are all nonstandard, but without them it would be more time consuming if not practically impossible for me to debug or optimize web pages.

      I am not trying to install iTunes or GAIM or games. Stupid people install that stuff at work. I just want to use tools that will allow me to get the job done. The web and its technologies are rapidly changing. Company Standard Software committees do not seem to be able to keep up, at least where I work. So, you can either 1) fight the establishment and risk looking like an "OSS hippie troublemaker" and still never get what you need, 2) work with approved but ineffective and usually expensive tools, or 3) just install what you need and produce good work. Within reason, I go with option number 3.

      So...unauthorized software isn't always better; authorized software isn't always better.
      --
      blah blah blah
    13. Re:What about the other half? by djdavetrouble · · Score: 3, Interesting

      I don't think it is fair to make such a broad generalization.
      It depends on the person. I have had plenty of very technical people
      in non technical positions. It is the halfway ones that give me a problem.
      Someone that is savvy will already know how to gain
      administrative rights on a Mac Laptop, and won't have to ask. The truly savvy ones
      almost never call for support unless a piece of hardware has failed.

      Tales from the trenches:
      I was working desktop for an advertising agency around the time that p2p was
      becoming VERY popular (edonkey, kazaa, etc). Each summer we would get a new
      batch of college interns. You could bet on 2 things, the girls were cute, and the
      boys would barely even pause to call their moms before installing their favorite
      p2p platform.

      At my next company we discovered a guy running around after 6 pm starting edonkey
      on every computer in his department.

      It wasn't long before hair trigger p2p client detection was installed.

      --
      music lover since 1969
    14. Re:What about the other half? by gmack · · Score: 4, Insightful

      You can thank some of the "power users" I've cleaned up after for some of the more restrictive IT policies. Most of my customers go from trusting all of their users to trusting none of them and demanding I lock down all machines. Why? Because (and it's usually the younger crowd) go nuts installing all of their own crap.

      They call me demanding to know why the internet is so slow and I find Limewire running on three PCs and now theres no b/w left for anything else.

      Why is the PC throwing up so many ad windows? Could it be that button bar they thought was cool was actually spyware?

      The best was the office that called me complaining "outlook is broken" Only for me to discover a 1 GIG game install file in the outgoing mail folder that was causing the whole thing to freeze while it processed the file.

      And then worse yet... if I ask them if they did anything lately they outright LIE to me until I spend the time needed to find out and show them exactly what they told me they didn't do. At least the older crowd is likely to be more honest and a lot less likely to intentionally install something.

  3. Also... by Mickyfin613 · · Score: 4, Funny

    They are more likely to play on your lawn. Make sure you yell at them from your front window. Damn kids.

  4. Contradiction? by eggman9713 · · Score: 3, Interesting

    They pose a greater risk because of unauthorized software, yet they are more security aware. Am I missing something that would otherwise make this sensical?

    1. Re:Contradiction? by Kozar_The_Malignant · · Score: 5, Insightful

      They are more aware. They just don't give a shit. :-)

      --
      Some mornings it's hardly worth chewing through the restraints to get out of bed.
  5. Funny that by damburger · · Score: 5, Insightful

    Most people born after 1980 are treated like shit in the IT industry. You are taken on for pitiful wages with vague promises of future riches, squeezed for every bit of knowledge you have, then booted out when the project(s) you are working on are finished. So it is hardly surprising that people treated so shabbily don't have a particular commitment to their workplace.

    Most of the highly technical and well paid jobs (system admins and the like) seem to be already taken by well established old folk, and nobody is really interested in training anybody for when they retire. Managers take IT systems completely for granted, consider IT professionals to be lowly peons, and are in for a nasty shock when the handful of people keeping their systems running leave.

    --
    If we can put a man on the moon, why can't we shoot people for Apollo-related non-sequiturs?
    1. Re:Funny that by pastpolls · · Score: 5, Funny

      You sound bitter that you have to start at the bottom like everyone else. Then again, maybe that is the problem some of us have with your generation.

    2. Re:Funny that by damburger · · Score: 4, Insightful

      Fine, fine, I'll get off your lawn.

      The myth that young people are spoilt and have an undue sense of entitlement is starting to wear a bit fucking thin though. In what way do we have more than previous generations? Tax burdens have been moved down to lower incomes in the UK, and I believe this is also the case in the US. Public services have been gutted by privatisation. Yet because we can buy iPods these days apparently we are spoilt. Fuck you. I'd rather be able to find an NHS dentist and get free higher education than have an mp3 player. Of course, now all you old fucks have no more need of public education and have fat wage packets to pay for private healthcare, you want such things scrapped so you don't have to pay for them. That is called 'kicking away the ladder'. Then you have the fucking nerve to complain about an undue sense of entitlement in the younger generation. You simply don't want to pay now for the things you were given to help you out when you were young.

      Yeah, I'm bitter. I was treated like crap and told to suck it up and that I was spoilt by a generation that had it a fuck load easier than I did. That is why I turned my back on the entire industry, although I don't hold out much chance of getting away from selfish middle-aged wankers any time soon.

      --
      If we can put a man on the moon, why can't we shoot people for Apollo-related non-sequiturs?
    3. Re:Funny that by 3waygeek · · Score: 4, Insightful

      Most people born after 1980 are treated like shit in the IT industry. So are most people born before 1980.
    4. Re:Funny that by SatanicPuppy · · Score: 3, Insightful

      One of my first jobs out of college was being hired into a situation where they had downsized everyone who had 10+ years of experience and replaced them all with kids straight out of college. You can imagine how the managers and supervisors, all of whose friends we were replacing, treated us.

      It definitely goes both ways. Sucks for him that he took it in the ass, but it happens. I remember showing up for work during the dot bomb and finding the doors chained shut. Yee haw. Had my 20 months of "freelancing" (e.g. scrabbling for consulting gigs and contract work in an economy saturated with out of work professionals). Tons of fun.

      Now I'm in my 30's and am probably one of the "middle aged" bastards he was talking about since he's a gen y kid and "middle age" can usually be calculated by adding 10 years to your current age. I remember being a know-it-all kid, and thinking I was better than people who'd worked their way up. Sometimes I was, but that doesn't change the fact that not everyone gets to start at the top.

      --
      ad logicam Claiming a proposition is false because it was presented as the conclusion of a fallacious argument.
    5. Re:Funny that by damburger · · Score: 3, Interesting

      Same old shit. "You are new, just accept your shitty pay and conditions and one day you will get the good job". I heard that before, and actually believed it for a few years. Then I saw the lack of progress me and all those around me were actually making. What you are saying is bullshit.

      It isn't about greed, it is about respect and being paid your due. The amount you are paid for applying your knowledge has less to do with the quality of your knowledge than how long you have been with the company - and young people are rarely with a company for long because we are treated as disposable tools. In such an environment where what you produce is compensated for by a pittance just because you are young, there is no incentive to work hard. There is a significant incentive to run off half-arsed work, spend the rest of the time playing with your gadgets, and bullshit your supervisor with technical jargon - so after 4-5 years being bounced around the industry that is what I did. Doing so made me feel slightly better about my shit jobs, and made no difference to the rate at which I was turned over.

      But like I said, I'm out now. I'm going into physics and hopefully a job where I can actually be respected for what I know.

      --
      If we can put a man on the moon, why can't we shoot people for Apollo-related non-sequiturs?
    6. Re:Funny that by Anonymous Coward · · Score: 3, Insightful

      You have an anger problem. That's why no one respects you. Or maybe it's your inability to defend a point of view without using foul language. Or possibly your lack of a sence of empathy. In any case, you are your problem; your age is not. I work in IT with several younger people (and am one myself) who get treated just fine. It's all due to the magic of "not being a whiny asshole who blames everyone else for his own problems". You know, like the stereotype.

      PS: Being a whiny physics asshole is even worse than being the jerk in IT that everyone hates. Congratulations on your step down.

    7. Re:Funny that by IRGlover · · Score: 5, Funny

      What about people, like me, born IN 1980. Should I maintain a chip on my shoulder or a smug sense of my own superiority? Should I install unauthorised software or not? AAARGH! The duality is tearing me apart...

    8. Re:Funny that by lysse · · Score: 4, Interesting

      I was treated like crap and told to suck it up and that I was spoilt by a generation that had it a fuck load easier than I did.

      Yes, you were. The baby boomers. Us gen-X-ers watched them take over everything on the grounds that youth and social position should not be discriminated against, cement themselves so firmly into positions of power that nothing can dislodge them, and then kick away the ladders they found so useful on the grounds that age and achievement should not be discriminated against. You lot are the second generation they've shat on - they practised on us, and we were so stunned by the sight of our future being flushed down the toilet that we let them get really good at it. Sorry about that... on the other hand, you guys have at least grown up without the memory of hope.
    9. Re:Funny that by Eli+Gottlieb · · Score: 3, Interesting

      You are confused son. Its a class struggle, not an age struggle. Stop attacking people on the basis of age; you're just making yourself into a useless annoyance to everyone and not accomplishing anything at all. You are also advertising the fact that you are basically an ignorant thug. I think damburger's anger is pretty damn stupid, but please read this.
  6. Two Cents by Ethanol-fueled · · Score: 3, Interesting

    disclaimer: I am a "millenial", whatever the hell that means ;)

    From the second slide: It's irritatingly true that many millenials can't pry themselves from their damn phones. Nobody should allow their phones to ring in class or during a date -- unless they're dope dealers, pimps, doctors, or on-call IT staff. That's why I prefer the company of mature women: they say a lot less, but what they say actually counts!

    From the fourth slide: Not at all surprised to see that 59 % of "millenial" workers think they can install whatever they want, given that more of them are spoiled gimme-gimmes...but to be fair, I'll bet that older people are far more adept at trashing their home computers than millenials are at trashing any computer. How many times have you all had to reinstall your grandpappy's mangled, crapware-infested OS(which shall remain nameless...*wink*)?

    From the tenth slide: how does better access to technology improve work/life balance? Does it enable workaholics to work from home during their offtime? Does it enable employees to feel "home" while fuckin' off on Myspace at work? I doubt that a significant percentage of those sampled were full-time telecommuters who truly felt a better work-life balance(read: they weren't "encouraged" to put in mass overtime just because they worked from home).

  7. Not much to this story by comet63 · · Score: 5, Insightful

    Looks like the title is overblown. The younger works do slightly more risky things than the older workers. However, the older workers (Gen X in this case) still do all the same things, just a little less often. None of the numbers suggest a big change in risk. A lot of the risk factors being described just go from numbers like 47% to 51%. Hardly anything dramatic.
    If you want to secure your network, you need to address all the risks that are out there. Adding a little more risky behavior does not really make for any real changes is the risks to the network. Networks are always at risk from the weakest link. A 60 year old employee who happens to do something risky is just as bad for the network as a 20 year old.

  8. Ug. Terrible article. by SatanicPuppy · · Score: 3, Insightful

    First off: Worst article ever. Not just one paragraph per page...1 statistic per page? Jesus. Content to page ratio is like .001:11. And what content there is is vapid and uninteresting.

    If you're an admin tasked with security, you have to assume all users are evil, so the question should be more along the lines of, "What is the problem with your process that you are allowing these users to install unapproved software?" Symantec obviously has a big stake in convincing people that they need better security (assuming that this will drive business for their crappy products), but the simple truth is that these sorts of problems shouldn't BE problems in an adequately secured network...Even your basic windows AD setup on XP is capable of restricting software installs and such.

    If you're a big believer in allowing users to install whatever crap that they think they need to do their jobs, then you'll need to invest in some solid networking gear because you're inevitably going to have more problems. Otherwise, just lock it down, set up an approval process, and be prepared to deal with a zillion complaints from people who think they're experts because they did their own myspace page.

    --
    ad logicam Claiming a proposition is false because it was presented as the conclusion of a fallacious argument.
  9. And old People... by boris111 · · Score: 4, Insightful

    give their passwords on the phone to whoever asks. I've seen it happen. Security is an issue that effects us all. Shouldn't single out the young people on this one.

    1. Re:And old People... by mcmonkey · · Score: 3, Interesting

      sometimes one has to depend on others' passwords(with the other's consent, of course) to get stuff done

      Oh no no no. I can't image a situation where someone else would have some legitimate business reason for knowing my password. Further more, I cannot imagine a situation where I'd want to know someone else's password. That's all I need, "Did ya hear? Bob got called in to the big boss's office this morning--something about 'questionable content' on one of the servers. Rumor is Bob claims someone else had access to his account."

      I have some unauthorized software on my computer. Some I really can't do my job without--Oracle client and SQL-Plus. Some are just nice to have--EditPadPro, for example. (Corporate policy was obviously written for business users, not IT or IS.)

      But passwords and access are entirely different story. If you don't have the credentials needed to do the job and someone is suggesting by-passing network security, it's time to suggest a meeting with that person, yourself, and that person's boss to get a clear understanding of why the situation requires a disregard for the company's security policy and all the common sense rules of network security.

      Now if you don't have the required access because you didn't contact the system/application owner or follow whatever procedure is in place to request access, I suggest you bite the bullet and take the blame. I'm sure whatever consequences follow will not be as bad as if you get caught breaking into someone else's account. (An account on a company system belongs to the company. If anyone in your IT department has any sense, there's a policy against sharing accounts and passwords such that an individual employee is not at liberty to share account information. Just because someone gives you their password does not mean you are authorized by the company to use their account.)

  10. Fair Trade by multisync · · Score: 5, Funny

    On the upside, the Millenials are more security aware than their older co-workers


    They're also less likely to call IT with problems like "I'm trying to make an Internet on my desktop but I can't get the file to program."
    --
    I don't care why you're posting AC
  11. Breaking News: by jockeys · · Score: 4, Funny

    This just in... young people are more likely to use iPods and PDAs than old people. Film at 11.

    --

    In Soviet Russia jokes are formulaic and decidedly non-humorous.
  12. Unauthorized software by wile_e_wonka · · Score: 4, Interesting

    What exactly does "unauthorized software" mean?

    My company doesn't give me administrator privilages, but has IE 5.5 installed. They haven't told me exactly what I can or can't do with my computer (except "you can browse the web in your down-time, but don't look at porn"), but I don't think the people that immediately oversee me know enough about computers to understand installing programs and stuff (really, it's pretty amazing--they don't even know that IE 5.5 is different at all from whatever they use at home).

    The computer won't let my upgrade IE, so I installed Opera and Firefox. Is this "unauthorized software"?

    Now, let's go a step more complicated.

    They said I can browse the web in my downtime, right. So I figured I can also download and view MIT physics lectures (yes, Walter Lewin). My computer doesn't have proper codecs to view these videos. So I had to install codecs, but the computer is very resistant to that--it took a lot of trial and error to find a codec that would install and also play the videos.

    Did the larger amount of work to avoid the problems associated with a lack of administrator privileges make this "unauthorized"?

    I've also tweaked the registry (this is Windows 2000) because there were several programs starting with the computer that I have no use for. "Unauthorized"?

  13. I'm in my mid-20's by failedlogic · · Score: 4, Insightful

    I'm in my mid-20's so I think I would fit into this "generation" gap and want to comment on this. And no, I'm not at work presently to post this, in case the inescapable irony strikes some readers.

    I know some of my peers feel that simply having access to the Internet means they can use it during the workday either to take a break during the work period, not work at all or use the Internet on breaks. My friends don't do this but I have had co-workers who have and were generally disciplined and eventually fired for not doing their assigned work.

    Personally, I feel that I have an obligation to my employer: 1) to do the tasks I am assigned and 2) to protect the information on their networks. I avoid using the Net at work for non-work tasks and social networks for these reasons.

  14. Re:I'm surprised how high the risk is anyway by Naosuke · · Score: 5, Funny

    Of course you can, their routing number is 666, but you still run into the problem of getting the account number of whoever you are sending the money to. Also the dollar is incredibly weak against souls right now, so it's pretty expensive.

  15. Age, not generation by khendron · · Score: 5, Insightful

    This article appears to be taking a stupid slant on the statistics that have been gathered. It keeps harping about the "Millenials" (people born after 1980) when really it should say "people in their 20s". My issue is that 20 years from now, the Millenials will be in their 40s, but it will still be the people in their 20s who are the greater risk. The Millenials are not a generation of risk takers, they are currently at the risk taking age.

    When I was in my 20s, I was much more risk prone than I am now (in my 40s). Back then I considered it my *right* to be able to install whatever I wanted on a computer, and would be unconditionally annoyed and offended if it was not allowed. Today I am more aware that there are reasons for most restrictions. Yes, some restrictions don't make sense, but a very many do.

    This type of thinking was in more aspects of life than just computers. Back in my 20s, I would say that I drove less cautiously than I do today. I drank more heavily, ate poorly, resented having to wear a bike helmet, jay-walked more often, the list goes on. These are all behaviours that I, and most people, grow out of.

    --
    Life is like a web application. Sometime you need cookies just to get by.
  16. Heh by Xest · · Score: 4, Interesting

    I'll remember this article next time that me, born in 1982 has to go round removing all the shareware games like Kyodai that all the middle age helpdesk women have decided to install on their computers because the 40 yr old manager we have thinks they should be free of security restrictions even if it causes such problems and creates security risks for the network.

    Or when I'm dealing with silly amounts of calls because one 40+ yr old colleague is stood outside on their mobile phone arranging with their wife who is doing the cooking and the other is browsing holiday sites deciding where to go on holiday next.

    Articles like this are stupid, they're a generalisation and where I work it couldn't be further from the truth. 3 out of 4 of our 1980s+ born workers and 1 out of 12 of our pre 1980s born workers make up our best 4 workers, that's completely out of line with the articles findings and whilst I realise you always get anomalies from statistical samples you should also not try and dress up this kind of bullshit as general fact.

    In fact look at TFA, as hard as that is when it insists on jumping to the next stat before you've had chance to check the page properly I don't notice any information how solid a test base they used.

    For all I know this could be put together by some disgruntled middle aged worker who actually sucks bad at his job but like many would rather blame someone else and so decided to blame the younger generation for taking his work.

    Anyone know how reasonable a test base was used for this study? As it stands I could equally put together a made up study claiming older people are more likely to steal from the work place and pass it off as being fact.

  17. Worst of all, they're 32% more likely... by dpbsmith · · Score: 3, Funny

    ...to use ten animated web pages to display data that could have been presented better in ten lines of text using old-fashioned print media.

  18. Fuck their networks.... by Simonetta · · Score: 5, Interesting

    I'm not a 'milleniumial', I was born in the first half of the 20th century. When I work for a company, they want two things: productivity and security. Security means that I'm not going to harm the company physical property and co-workers. Productivity means that I produce more of what they sell than it costs them to pay me.

        Two paracitical factors inhibit this arrangement: the IT department and the human resources (legal) department. The cousin ITs believe that they can build a framework according to their training that will make us all be more productive. The HR believe the same with a different framework. But since neither of them are engaged in the primary productive activity that makes the enterprise profitable, the inevitably screw it up. In a million little and not so little ways. So we fight back.

        Case in point, in the USA the politicians and insurance companies have fucked-up the health care industry to the point where most employers will not hire people in order to avoid providing health insurance. They hire people on 'contracts' creating a class of permanent temporary workers. This is especially common in the electronics industry. We work some place for six months, then work another place for six months, etc... If we get sick, we point a gun at the head of some supermarket manager and have him give us the cash in the safe. It's the new American way, it will happen to you, so don't judge me for what I must do. I don't want to hurt anyone.

        Anyway, we bring our own tools to new jobs. Our software programs that we customize and modify that will maximize our productivity. Tools like text editors, spreadsheet macros, graphics and CAD design programs. I'm going to spend forty hours learning CADbozoCAD when most of the industry uses BozoCAD, just because your company got it a 10% discount? Fuck that!

        I'm going to put BozoCAD my computer that I work with. I'm going to create works and convert the results into standard formats. I'm going to ignore as much as possible any previous work done in any non-industry standard format. Is there a risk to your company network and even maybe the BSA Microsoft thugs? Possibly, but...I...don't...give...a...fuck. If you hire us and provide health insurance like all companies do in the rest of the civilized world, then I ( and the millions like me in this situation) would be more sensitive to these concerns. It's one of the unforseen issues that results from using perma-temps as your workforce.

      Most production managers realize this and accept it. Most cousin ITs and dumb-as-shit Human Resources people don't. Because it doesn't fit into the frameworks that they built. But my paycheck depends on the companie's bottom line and as a production worker, I create that.

        So it is a constant three-way battle between the cousin ITs (the information technology department of the company who maintain the company network),the perma-temps, and the HR lawyers. They ALWAYs believe that by firing us, they maintain control and security. But they don't provide the product that keeps the company in business. Their departments are not profit centers for the company.

        So the game just goes around and around. This is why I have come to hate the IT department in any company. HR people are too stupid to be concerned with, and lawyers aren't human so don't waste emotional cycles on them.

    1. Re:Fuck their networks.... by v3lut · · Score: 5, Insightful

      Why do people in this country feel so obligated to work for companies that treat them like crap?

      Somewhere along the line here is some element of choice, and it's an element that people have somehow been taught that they don't really have anymore. "It's the best job I can get" or "that's how this industry works."

      I don't accept that, and I don't think anyone else should. Once you're working at a certain level, probably just above the poverty line, you make a choice what you're going to do to earn money, and who you're going to work for. We all make these choices based on supporting the kind of lifestyle we want. If your entire industry works this way, and you hate it so badly, you should work in ways that don't make you miserable. That might mean adjusting your lifestyle. But seriously, find something that makes you happy and do it. Don't spend your life working for people that treat you like crap. I won't, even if it means living in a tent. I'm not for sale.

      --
      http://downwithpants.org Overthrow the tyranny of your pants
    2. Re:Fuck their networks.... by King_TJ · · Score: 3, Interesting

      I don't really find the parent post all that "insightful". It may, indeed, be his previous experiences with employment - but it doesn't speak for everyone.

      I've worked in computer support AND in a management capacity with I.T. for several smaller companies, and things never really played out like his description claims.

      In fact, I can't remember working in an environment where an employee flat-out wasn't allowed to install a piece of software that he/she found aided him/her in doing their job. If you want to use "BozoCAD" and the company officially has "CoolCAD" installed everywhere, ok. A little COMMUNICATION with people in I.T. would get you approved to load a copy of BozoCAD on your PC. (It's cheaper to have you use a product you're efficient using than to waste company time and money training you on an alternative.)

      The only problem comes about when someone just assumes they know better than anyone else what should be on their PC, and they take it upon themselves to install and use unofficial software without informing anyone.

      And to be totally honest, *I* have always taken the stance of "If I'm familiar with the software I find out you've installed on your own, and I'm fairly confident it's not harmful to the network, I'll opt to leave it alone." This might bend the "letter of the law" a little bit with H.R. people and their policy handbooks .... but we all know they're like lawyers. They write policies to cover ALL possible scenarios, just in case they need to enforce something. They're not even smart enough about matters like I.T. to KNOW you're in violation, if someone in I.T. doesn't take the issue to them and ASK for enforcement.

      I think the original point of this whole Slashdot article was more about younger employees insisting on installing "entertainment" type software, though ... social networking and chat apps, etc. If you want a chat client on your company PC, you should be prepared to justify its existence to management. (I've worked with software developers who really did use IRC clients and IM because they needed to bounce problems and potential solutions off of other like-minded people over the Internet. But if you just want to talk to your girlfriend while you work, hey --- too bad, so sad.)

    3. Re:Fuck their networks.... by dissy · · Score: 3, Insightful

      Security means that I'm not going to harm the company physical property and co-workers. Productivity means that I produce more of what they sell than it costs them to pay me I just wanted to point out one detail.
      Security is not limited to their physical property. Security includes their digital assets as well.

      As an example, if your company makes widget, and the staff uses computers to design said widget, to send those designs to the part of the company (or another company) who actually builds said widget, then the designs for that widget are digital assets, and are no doubt quite valuable to them.

      If I as a hacker, working for another company, or even for myself, got access to your company computers and copied those designs, I could then either give them to my company to give them an advantage over yours, or if working alone, I could offer to sell them to every company that competes with yours, giving them all a leg up on your company, plus making a tidy profit for myself.

      While I agree that a lot of times the things put in place by IT to stop this are poor, i'm sure they would feel you do not have the right to do things that would aid me in copying those designs. To some IT departments, this includes you installing software on their computers. The fact they may be wrong is still not your task to covet and single handedly choose for them. If you think their methods are wrong, try telling them why, and suggesting a more correct approach. If they still choose to go about it wrong, then let them (and look for another job, since that company most likely wont be in business long, thus needing you.)

      You may disagree with their policy, and may even be perfectly right in your reasons for it, but the fact remains it is still their hardware, their network, and their digital assets, not yours.

      Taking your attitude is akin to me visiting you, sitting at your computer, deciding that the way you set it up is 'wrong', and changing that against your will.

      You have every right to make wrong choices with your own property. So does the company you work for.

      And if you really honestly believe it is perfectly ok for someone (you) to come in and tell someone else (the company) what they can and can not do with their own property, well, by that exact logic, you have no right to complain still, because someone (me) has by your own argument the right to come in and tell someone else (you) what YOU can and cant do with your own computer. Thusly, I say you arn't allowed to reply and complain, and thankfully, you would agree ;}
    4. Re:Fuck their networks.... by CodeBuster · · Score: 5, Insightful

      I won't, even if it means living in a tent. I'm not for sale. A noble sentiment, but sentiment does not put food on the family table. Not all of us are able to make decisions secure in the knowledge that only we ourselves will suffer the consequences if our decisions turn out to be wrong or even just-sub optimal. Some of us have families and other people who's fortunes depend upon our success. Real life is, unfortunately, rarely as simple as our high minded principles lead us to believe.
  19. Re:fuck load easier? was:Re:Funny that by xtracto · · Score: 4, Insightful

    I will step to put a bit of perspective on this flamefest and tell you something I heard somewhere (unfortunately I can not site but someone here will certainly correct me). The paraphrased quote went something like this:

    "The difference between Americans and British is that Americans believe their country is wonderful and is the best one in the world while the reality is that it is terrible. On the other hand, Britons are always bitching about their country without realizing their life is actually pretty good".

    I can tell you from my experience in the UK (I've lived in the UK for about 4 years, coming form Mexico) is that you people over here have it really easy. Shit, people can just stop working and the government will pay them money. "spare some change mate?" you see people selling the "big issue" and then they go to cash their check to get beer. That is being poor in this country. Let me tell you, you do not know what the fuck you are talking about.

    For people in the UK life is really easy right now. It is, really. You have a hell lot of things which you take for granted. You whine that you can not get a free dentist. Oh shit, but you do not see that in other countries and in other times (even in your country) there is no free NHS even for a freaking Nurse.

    So as other people already said, stop whining and go back to fucking work you lazy ass.

    --
    Ubuntu is an African word meaning 'I can't configure Debian'
  20. Re:It's you, not them by kesuki · · Score: 5, Interesting

    he chose to blame insurance blah blah... but the fact of the matter is temp agencies ARE becoming massive massive employers for white collar jobs. the early temp agencies were for blue collar jobs, but now it's spread to white collar jobs and, yeah the company usually doesn't hire you because replacing you with another temp instead of hiring you is 'cheaper.'

    I have heard of many many places that now use temp agencies almost exclusively. The reason why white collar jobs are going to temp agencies, is because they can staff the positions like lightning and have them ready to be restaffed when the people have been on contract too long, and you get a really good idea of where to put certain people because of the tests the temp agency runs... I know some of this stuff can be done with a normal HR department, but it boils down to cost, temp agencies get the worker to do the same job for less pay, even when the temp agency takes a certain cut of that pay.

  21. Re:I think I see your problem by damburger · · Score: 3, Insightful

    The previous generation had free education and healthcare paid for, mostly, by older taxpayers. Now they have reached that age, they are grumpily demanding tax cuts. So who the fuck has the sense of entitlement?

    --
    If we can put a man on the moon, why can't we shoot people for Apollo-related non-sequiturs?
  22. Re:It's you, not them by pw1972 · · Score: 3, Interesting

    I was going to comment on this thread, but you hit the nail on the head. I work for the "evil" fortune 500 large corporation. Same situation. We get a lot of resumes, a few look like they might be a match technically, and then even fewer have the personality to work in a corporate environment. We almost exclusively do try-to-buy contracts here for that reason, usually 6 mos to a year before someone will get hired on full-time. It's a two way street also, sometimes after 6 mos they want to run screaming from here. We've gotten to the point where we are usually willing to sacrifice technical expertise for personality. We can overcome just about any technical obstacle, however the rogue @ssh0le programmer that can't and won't work well with others is virus to the organization, especially considering it takes an act of congress to fire anyone anymore.

  23. Re: Then the Boomer arguement is backwards by colinnwn · · Score: 3, Interesting

    Maybe... just maybe... you have a point. But if so, the boomer generation should emphatically NOT be saying Gen X and Millenials are lazy self-entitled pansies. Instead Boomers should be saying - We're sorry, we collected more intergenerational economic rents than we should have, and kept doing it for too long. We are the arrogant and greedy generation. Now that we are "rich" on our children, grand children, and great-grand-children's backs, how can we transfer some of that wealth back to later generations and ease your transition into economic sustainability?