Slashdot Mirror


Young Employees Pose Increasing Risk to Networks

buzzardsbay writes "Baseline is reporting on an upcoming survey from Symantec and Applied Research-West that confirms many suspicions about the generation gap in the workplace, namely that younger workers will use your corporate network to run most any device, technology or social networking software they can get their hands on. Dubbed "Millenials," these workers born after 1980 are nearly twice as likely to use cell phones and PDAs at work, and half admit to installing unauthorized software on their employer's computers. On the upside, the Millenials are more security aware than their older co-workers."

22 of 710 comments (clear)

  1. they need to protect their networks by k3v0 · · Score: 5, Insightful

    isn't it the company's responsibility to control their network?

    1. Re:they need to protect their networks by SatanicPuppy · · Score: 5, Insightful

      Having a company adequately secure their network would cut into symantec's bottom line, so, from their perspective, no.

      --
      ad logicam Claiming a proposition is false because it was presented as the conclusion of a fallacious argument.
    2. Re:they need to protect their networks by tattood · · Score: 5, Insightful

      isn't it the company's responsibility to control their network?
      It's also about educating the employees more than anything IT can do to protect the network. If I can call one of your employees and pretend to be the remote helpdesk, and say that I need your password so I can install some software on your computer, and they give me the password, I am in your network.

      It's called social engineering, and if you are good at it, you can get past ANY network or software based systems.
      --
      WTB [sig], PST!!!
    3. Re:they need to protect their networks by Verteiron · · Score: 5, Insightful

      And that's a great idea, until you end up with a piece of required software that refuses to run without local admin privileges on the computer...

      --
      End of lesson. You may press the button.
    4. Re:they need to protect their networks by guy-in-corner · · Score: 5, Insightful

      I'm a C++/C# developer and I've been running in a normal account for over two years now. It's no biggy. I do need to elevate to local admin occasionally: I keep another session open (either with Remote Desktop or Fast User Switching).

      Granted, we're specifically discussing locking down the local admin account entirely. My point is that if more developers took the time to run without admin privileges, we'd see a lot more programs that didn't ask for admin rights unnecessarily.

    5. Re:they need to protect their networks by someme2 · · Score: 5, Interesting

      It's also about educating the employees more than anything IT can do to protect the network. If I can call one of your employees and pretend to be the remote helpdesk, and say that I need your password so I can install some software on your computer, and they give me the password, I am in your network.

      In other news:

      "That's not our problem", says area CIO. "Our problem is educating our helpdesk, that if someone calls and says he's an employee and needs a new password for his account, they shouldn't just give out a password without further identification. "

      Seen it happen in three companies in the last 5 years. Each company with more than 2000 employees & one of them a fortune-500 company.
      --
      You can attach boosters to anything. It just costs more. -
      Anonymous Coward on Sunday November 07, @12:26PM
    6. Re:they need to protect their networks by SoonerSkeene · · Score: 5, Funny

      I work for a certain convergent outsourcing company which converges with converging technologies to provide a ... okay I've taken this too far: I work for Convergys. Every user on their network is an administrator. Every. Single. One. We have 1200 or so employees at my site alone, and we've got over 70 sites in the US.

      They use group policy security to control the network, but you wouldn't believe how little thought goes into it. We had a new team form to provide support for a certain now-defunct pacific-coast city's municipal wifi. Because supporting an internet service sometimes requires tools such as ping/tracert/whatever -- they gave us a command prompt. But because they didn't want us having all kinds of access, what they really gave us was a shortcut to a batch file, which started with a choice prompt, allowing you to 'paste' so-to-speak, several commands, such as it would not let you have a blank prompt. It would always have a command, such as C:\>ping .

      Well apparently no one told them that you can concatenate commands. We soon discovered we could just use the batch file to C:\>ping google.com & start cmd and have an unrestricted command prompt. And since we're all administrators, we can use MMC, and control every other part of our access.

      I've since moved past my call-taking days, but I still work for them as an analyst. Of course they still won't let me provide any kind of network security device.

  2. Funny that by damburger · · Score: 5, Insightful

    Most people born after 1980 are treated like shit in the IT industry. You are taken on for pitiful wages with vague promises of future riches, squeezed for every bit of knowledge you have, then booted out when the project(s) you are working on are finished. So it is hardly surprising that people treated so shabbily don't have a particular commitment to their workplace.

    Most of the highly technical and well paid jobs (system admins and the like) seem to be already taken by well established old folk, and nobody is really interested in training anybody for when they retire. Managers take IT systems completely for granted, consider IT professionals to be lowly peons, and are in for a nasty shock when the handful of people keeping their systems running leave.

    --
    If we can put a man on the moon, why can't we shoot people for Apollo-related non-sequiturs?
    1. Re:Funny that by pastpolls · · Score: 5, Funny

      You sound bitter that you have to start at the bottom like everyone else. Then again, maybe that is the problem some of us have with your generation.

    2. Re:Funny that by IRGlover · · Score: 5, Funny

      What about people, like me, born IN 1980. Should I maintain a chip on my shoulder or a smug sense of my own superiority? Should I install unauthorised software or not? AAARGH! The duality is tearing me apart...

  3. Not much to this story by comet63 · · Score: 5, Insightful

    Looks like the title is overblown. The younger works do slightly more risky things than the older workers. However, the older workers (Gen X in this case) still do all the same things, just a little less often. None of the numbers suggest a big change in risk. A lot of the risk factors being described just go from numbers like 47% to 51%. Hardly anything dramatic.
    If you want to secure your network, you need to address all the risks that are out there. Adding a little more risky behavior does not really make for any real changes is the risks to the network. Networks are always at risk from the weakest link. A 60 year old employee who happens to do something risky is just as bad for the network as a 20 year old.

  4. Re:Contradiction? by Kozar_The_Malignant · · Score: 5, Insightful

    They are more aware. They just don't give a shit. :-)

    --
    Some mornings it's hardly worth chewing through the restraints to get out of bed.
  5. Fair Trade by multisync · · Score: 5, Funny

    On the upside, the Millenials are more security aware than their older co-workers


    They're also less likely to call IT with problems like "I'm trying to make an Internet on my desktop but I can't get the file to program."
    --
    I don't care why you're posting AC
  6. Re:What about the other half? by digitig · · Score: 5, Insightful

    I assume the other half:
    - Do it but don't admit it
    - Or don't it but are way less productive than their peers

    I don't know how it is for the rest of the slashdot crowd but almost everywhere I've worked it's impossible to be (decently) productive using only authorized software. Quite. I remember being employed to do software development when there were no programming languages included in the approved software, because the people who drew up the approved software list had never bothered to ask the business areas what they did with their computers. I never did get any languages approved, but I did get them to lift my authorisation level so I could run executables that weren't on their heavily locked-down desktop, which was all it took. The company bought the C++ compiler I asked for, and I installed and used it -- unauthorised.
    --
    Quidnam Latine loqui modo coepi?
  7. Re:I'm surprised how high the risk is anyway by Naosuke · · Score: 5, Funny

    Of course you can, their routing number is 666, but you still run into the problem of getting the account number of whoever you are sending the money to. Also the dollar is incredibly weak against souls right now, so it's pretty expensive.

  8. Age, not generation by khendron · · Score: 5, Insightful

    This article appears to be taking a stupid slant on the statistics that have been gathered. It keeps harping about the "Millenials" (people born after 1980) when really it should say "people in their 20s". My issue is that 20 years from now, the Millenials will be in their 40s, but it will still be the people in their 20s who are the greater risk. The Millenials are not a generation of risk takers, they are currently at the risk taking age.

    When I was in my 20s, I was much more risk prone than I am now (in my 40s). Back then I considered it my *right* to be able to install whatever I wanted on a computer, and would be unconditionally annoyed and offended if it was not allowed. Today I am more aware that there are reasons for most restrictions. Yes, some restrictions don't make sense, but a very many do.

    This type of thinking was in more aspects of life than just computers. Back in my 20s, I would say that I drove less cautiously than I do today. I drank more heavily, ate poorly, resented having to wear a bike helmet, jay-walked more often, the list goes on. These are all behaviours that I, and most people, grow out of.

    --
    Life is like a web application. Sometime you need cookies just to get by.
  9. Re:What about the other half? by haystor · · Score: 5, Funny

    "They always think they know better, they have a massive attitude, and a huge superiority complex."

    They?

    --
    t
  10. Re:What about the other half? by hobo+sapiens · · Score: 5, Insightful

    "installing unauthorized software" = "more productive"
    False dichotomy.

    Where I work, the company standard IDEs for web development are Dreamweaver or Eclipse. Both are completely unacceptable. Yet, a F/OSS text editor like jEdit is nonstandard but allows me to be much more productive. Why? Because it allows me to work quickly. I have all of the powerful text editing tools of an IDE without the extreme overhead.

    Also, as someone else replied, Firefox and certain plugins like Firebug and the Tidy validator are critical. I am a web developer, you see, and IE's ultracrappy javascript debugging capabilities are not even worth considering (even with the insanely useless MSFT Dev Toolbar installed). Profiling AJAX calls, or ANY HTTP request, is impossible without a tool like Firebug. And they are all nonstandard, but without them it would be more time consuming if not practically impossible for me to debug or optimize web pages.

    I am not trying to install iTunes or GAIM or games. Stupid people install that stuff at work. I just want to use tools that will allow me to get the job done. The web and its technologies are rapidly changing. Company Standard Software committees do not seem to be able to keep up, at least where I work. So, you can either 1) fight the establishment and risk looking like an "OSS hippie troublemaker" and still never get what you need, 2) work with approved but ineffective and usually expensive tools, or 3) just install what you need and produce good work. Within reason, I go with option number 3.

    So...unauthorized software isn't always better; authorized software isn't always better.
    --
    blah blah blah
  11. Fuck their networks.... by Simonetta · · Score: 5, Interesting

    I'm not a 'milleniumial', I was born in the first half of the 20th century. When I work for a company, they want two things: productivity and security. Security means that I'm not going to harm the company physical property and co-workers. Productivity means that I produce more of what they sell than it costs them to pay me.

        Two paracitical factors inhibit this arrangement: the IT department and the human resources (legal) department. The cousin ITs believe that they can build a framework according to their training that will make us all be more productive. The HR believe the same with a different framework. But since neither of them are engaged in the primary productive activity that makes the enterprise profitable, the inevitably screw it up. In a million little and not so little ways. So we fight back.

        Case in point, in the USA the politicians and insurance companies have fucked-up the health care industry to the point where most employers will not hire people in order to avoid providing health insurance. They hire people on 'contracts' creating a class of permanent temporary workers. This is especially common in the electronics industry. We work some place for six months, then work another place for six months, etc... If we get sick, we point a gun at the head of some supermarket manager and have him give us the cash in the safe. It's the new American way, it will happen to you, so don't judge me for what I must do. I don't want to hurt anyone.

        Anyway, we bring our own tools to new jobs. Our software programs that we customize and modify that will maximize our productivity. Tools like text editors, spreadsheet macros, graphics and CAD design programs. I'm going to spend forty hours learning CADbozoCAD when most of the industry uses BozoCAD, just because your company got it a 10% discount? Fuck that!

        I'm going to put BozoCAD my computer that I work with. I'm going to create works and convert the results into standard formats. I'm going to ignore as much as possible any previous work done in any non-industry standard format. Is there a risk to your company network and even maybe the BSA Microsoft thugs? Possibly, but...I...don't...give...a...fuck. If you hire us and provide health insurance like all companies do in the rest of the civilized world, then I ( and the millions like me in this situation) would be more sensitive to these concerns. It's one of the unforseen issues that results from using perma-temps as your workforce.

      Most production managers realize this and accept it. Most cousin ITs and dumb-as-shit Human Resources people don't. Because it doesn't fit into the frameworks that they built. But my paycheck depends on the companie's bottom line and as a production worker, I create that.

        So it is a constant three-way battle between the cousin ITs (the information technology department of the company who maintain the company network),the perma-temps, and the HR lawyers. They ALWAYs believe that by firing us, they maintain control and security. But they don't provide the product that keeps the company in business. Their departments are not profit centers for the company.

        So the game just goes around and around. This is why I have come to hate the IT department in any company. HR people are too stupid to be concerned with, and lawyers aren't human so don't waste emotional cycles on them.

    1. Re:Fuck their networks.... by v3lut · · Score: 5, Insightful

      Why do people in this country feel so obligated to work for companies that treat them like crap?

      Somewhere along the line here is some element of choice, and it's an element that people have somehow been taught that they don't really have anymore. "It's the best job I can get" or "that's how this industry works."

      I don't accept that, and I don't think anyone else should. Once you're working at a certain level, probably just above the poverty line, you make a choice what you're going to do to earn money, and who you're going to work for. We all make these choices based on supporting the kind of lifestyle we want. If your entire industry works this way, and you hate it so badly, you should work in ways that don't make you miserable. That might mean adjusting your lifestyle. But seriously, find something that makes you happy and do it. Don't spend your life working for people that treat you like crap. I won't, even if it means living in a tent. I'm not for sale.

      --
      http://downwithpants.org Overthrow the tyranny of your pants
    2. Re:Fuck their networks.... by CodeBuster · · Score: 5, Insightful

      I won't, even if it means living in a tent. I'm not for sale. A noble sentiment, but sentiment does not put food on the family table. Not all of us are able to make decisions secure in the knowledge that only we ourselves will suffer the consequences if our decisions turn out to be wrong or even just-sub optimal. Some of us have families and other people who's fortunes depend upon our success. Real life is, unfortunately, rarely as simple as our high minded principles lead us to believe.
  12. Re:It's you, not them by kesuki · · Score: 5, Interesting

    he chose to blame insurance blah blah... but the fact of the matter is temp agencies ARE becoming massive massive employers for white collar jobs. the early temp agencies were for blue collar jobs, but now it's spread to white collar jobs and, yeah the company usually doesn't hire you because replacing you with another temp instead of hiring you is 'cheaper.'

    I have heard of many many places that now use temp agencies almost exclusively. The reason why white collar jobs are going to temp agencies, is because they can staff the positions like lightning and have them ready to be restaffed when the people have been on contract too long, and you get a really good idea of where to put certain people because of the tests the temp agency runs... I know some of this stuff can be done with a normal HR department, but it boils down to cost, temp agencies get the worker to do the same job for less pay, even when the temp agency takes a certain cut of that pay.