Slashdot Mirror
Searching For Backdoors From Rogue IT Staff
WHiTe VaMPiRe writes "When IT staff are terminated under duress, there is often justification for a complete infrastructure audit to reduce future risk to a company. Here is an exploration of the steps necessary to maintain security." Of course the first piece of advice is to basically assume you've been rooted. Ouch.
It's great for a bit of extra consultancy work when you have been made redundant too.. Walk out and guess what, a week later things break and you're on $1000 a day fixing it ;-)
But really, the best thing to do is to treat your IT staff properly in the first place.
"I say we take off and nuke the entire site from orbit. It's the only way to be sure."
I've abandoned my search for truth; now I'm just looking for some useful delusions.
Your HR can make the IT guys wife not leave him? That is truly competant.
The worst logic bomb I had to deal with was written similarly by an underpaid (debatable) programmer. He set it up so that when money was exchanged between accounts the program would then truncate the remainder. This, in fact, was only a fraction of a cent. Then he took that remainder (once it had accumulated a bit) and transfer it out into a bank account of his own. As it turns out, it was relatively easy to install.
We were so far behind for the Y2K updates, most people simply didn't notice. A couple days later the building burned down.
That's why the Bobs gave him a promotion!