Slashdot Mirror


Why IT Needs To Change for Gen Z

An anonymous reader writes "Staff will routinely be bringing their own devices to work in five years time, according to IT industry experts in the UK. Some companies might already allow a few iPhones and iPads, but CIOs and businesses are not only going to have to support a general influx of consumer kits — they're going to need to get a whole lot more relaxed in general. 'Big businesses are going to have to become more flexible about how IT is provisioned and managed — to enable a new generation of workers who use consumer technologies to communicate and be productive.'"

66 of 443 comments (clear)

  1. Not where I work... by Frosty+Piss · · Score: 4, Insightful

    Staff will routinely be bringing their own devices to work in five years time, according to IT industry experts in the UK

    Not where I work. Seriously, a *LOT* would have to change - like a move away from Windows networks, and that's not going to happen (sorry).

    --
    If you want news from today, you have to come back tomorrow.
    1. Re:Not where I work... by AlienIntelligence · · Score: 2

      Yeah, I run a home office and I would rather provide a pc than have some virus infected vector on my network.

      -AI

      --
      For me, it is far better to grasp the Universe as it really is than to persist in delusion
    2. Re:Not where I work... by SerpentMage · · Score: 2, Interesting

      No I do think people are missing a point. I think what will happen is that people will be allowed and encouraged to bring their own devices. BUT those devices will be treated as security risks. Then to get into the network it will be a sort of private cloud type situation.

      Think of it as follows; you bring your iphone and you access your corporate network using a terminal. That terminal does not let you share with the local environment. It is completely closed off from your own data. I have already seen some prototypes in the investment banking field.

      --

      "You can't make a race horse of a pig"
      "No," said Samuel, "but you can make very fast pig"
    3. Re:Not where I work... by PC+and+Sony+Fanboy · · Score: 2, Insightful

      Yeah, I run a home office and I would rather provide a pc than have some virus infected vector on my network.

      -AI

      ... Your problem isn't virus vectors, it's hiring incompetent people.

    4. Re:Not where I work... by Tarlus · · Score: 5, Insightful

      A [insert OS here] computer managed by competent IT staff is likely to be far more secure than an an unmanaged [insert same OS here] computer brought in from the outside.

      Yes, even Windows.

      --
      /* No Comment */
    5. Re:Not where I work... by klubar · · Score: 4, Insightful

      I second this thought. Remember, that's why they call it work. If employees want to update their facebook status, chat with friends, shop or goof off, I believe that's what they call leisure.

    6. Re:Not where I work... by klubar · · Score: 2

      I believe the solution is to put the "courtesy" network completely outside of the work network--no connection. Although you still need to run a firewall to prevent rogue servers and downloads. One could argue that the company is completely responsible for any illegal use (downloads, spam) on their corporate IP addresses.

      Unless the IP addresses are in a completely seperate range, the company needs to be careful that any spam from the "friends" network doesn't impact the corporate rating.

      The next question is it really worth the bother? The hip employees with their iphones already have data plans (and probably don't care how much it costs (see Apple kit)), so why do you need to provide free wifi?

    7. Re:Not where I work... by GunFodder · · Score: 3, Interesting

      How does your company attract and retain talent with such draconian policies?

    8. Re:Not where I work... by adamofgreyskull · · Score: 3, Informative

      A person can be a perfectly competent bookkeeper, accountant or any number of other things and yet not be competent (or diligent) enough to keep their machine virus-free.

    9. Re:Not where I work... by Culture20 · · Score: 2

      A [insert OS here] computer managed by competent IT staff is likely to be far more secure than an an unmanaged [insert same OS here] computer brought in from the outside.

      Yes, even Windows.

      I would normally agree, except that stupid business decisions make security a third or fourth tier concern on managed machines. ie IE6 Often times, competent IT staff are ordered to suck it up and get used to reimaging regularly.

    10. Re:Not where I work... by PC+and+Sony+Fanboy · · Score: 2

      A person can be a perfectly competent bookkeeper, accountant or any number of other things and yet not be competent (or diligent) enough to keep their machine virus-free.

      Technically true. A person can also be extremely intelligent but refuse to shower and constantly cut themselves. There is a minimum level of competence that should be required for a position. Sure, you can do task A - but can you show up to work with clothes on? And (arguably more importantly), can you stop looking at porn while at work? Oh, and while you're at it, don't install strange programs.

      I'm not saying you need to be a genius. I'm just saying that there is a certain level of competence that society requires... and there isn't really any excuse for the lack of competence in personal hygene and social skills. Why should a lack of competence in other basic areas of life be okay?

    11. Re:Not where I work... by tibit · · Score: 2

      What's the problem with having some egress filtering to prevent spam escaping from pwned machines, and with having proper NAT infrastructure in place to log everything? If the network is set up properly, each wired guest machine can be on its own vlan. At work, I use Zultys ZIP4x4 phones set up such that each port on their built-in network switch is on its own VNET. Each phone uses 3 vlans that way. Thus every machine is isolated from all others -- runs on its own network segment with the only other host being the router. This saves the need for wired guests to use vpns. The routing/filtering is done from the physical interface (the one that sees vlan tags), so there's just one network interface visible on the linux machine (instead of one per vlan).

      For wireless clients, things are harder of course -- so far I've simply established an open network where all you can do is get a WPA PSK key for your node -- different one is generated for each MAC, and they are cached for one business day. Then you can associate with the encrypted network, and things are transparently handled such that each node uses a different key. This is the closest I could get to having each wireless node in an isolated segment. Of course they are all in the same contention domain, but they don't see other users' packets' contents.

      Since every guest host only sees the "outside" (via a transparent proxy, NAT and firewall), there's no way for malware to propagate between guest nodes, and they don't disrupt non-guest connectivity:non-guest wireless uses separate channels, and bandwidth is allocated in the "backhaul" links so that guest traffic always has lower priority than non-guest traffic. Easy once you get it working.

      --
      A successful API design takes a mixture of software design and pedagogy.
    12. Re:Not where I work... by EdIII · · Score: 2

      That will only help you so much. By helping, I mean not really that much at all.

      The systems that I have set up I purposely create a whole other wifi network that people can connect their smart phones and personal equipment into. What I tell my clients, and their employees, is that every major website and activity they do on the web represents at minimum a medium risk to the business. Which is why they connect their personal equipment to this separate network that has no possibility of interacting or interfering with their business network.

      That is a fact. This is not 20 years ago where somebody thought it was funny to make a cookie monster virus that forced you to type cookie to stop it. Innocence has been lost, and it has been quite awhile. Back in the days of our innocence I infected several computers that would turn the screen upside down when a certain key was pressed. It did not propagate and was just fun office humor. However, we have long since left the funny antics of Val Kilmer in Real Genius. It is dangerous, destructive, and costly to consumers and businesses.

      Malware is HUGE business. SPAM is just one method of delivery, or a tool in the tool box. That needs to be understood first before you can even handle the problem. Organized Crime *WANTS* your equipment. Your are a commodity to them. You possess:

      1) Possible banking information that could be valuable depending on just how much money you have.
      2) Earning potential through surreptitious purchases on your behalf. Premium SMS, 900 phone calls, App purchases, etc.
      3) A tool in their tool box. Attacks on VISA, MasterCard, and Amazon were mostly conducted by other people's equipment without their knowledge.
      4) The rare gem. A piece of equipment that has a LOT of valuable data on it already. A couple thousand or million credit cards or customer profiles. A piece of equipment that has secure access back into multiple other systems that manage consumer services and banking transactions. From their it can escalate to an incredible, and sometimes unsurvivable, level of impact against major businesses.

      There is a reason why I think it was Michigan or some other state put serious penalties when a company has consumer information released.

      Letting an employee bring in personal equipment, when their level of sophistication can be dramatically less than the IT department, represents nothing less than insanity.

      This is, yet again, a decision where you balance the ease of use and friendliness of a system or environment against its security. However, if you let employees bring equipment in, that is not vetted, inspected, and controlled by the IT department, you might as well just close up shop.

      When I have been brought in for disaster management, 9/10 times it was an infected "foreign" system that was brought into the network and/or the complete lack of any security or content management from what the employees could do. Stuff like scare ware, Pandora, Limewire, Kazaa, and endless other stupidity on not just personal machines, but the business machines, and in one instance their entire server infrastructure was infected because somebody decided the best place to surf for questionable porn was a remote desktop session on a 2003 windows server.

      I get asked why their bandwidth is so slow, and when they have VOIP phones their quality is so low, when they only have 3 Mb/s symmetric and everybody is on YouTube, FaceBook, Pandora, and downloading videos. That and an executive is on Netflix trying to watch something in HD in his office.

      If you are going to run a business seriously, that has any contact with confidential consumer data, you DO NOT ALLOW PERSONAL DEVICES ON THE CORPORATE NETWORK. Everything is controlled. You disable USB ports on the thin terminals and fat clients the employees use, give them a viable option to FaceBook through their phones without eating up their data plans, and lock the crap down. Whether or not it is Windows or Linux, you don't allow employees the right

    13. Re:Not where I work... by thenetbear · · Score: 5, Insightful

      I'd assume the same way most companies retain employees: through the regular disbursement of paychecks and employees who fear the loss of said. Most companies see a "talented" employee as one who performs adequately and follows the rules.

    14. Re:Not where I work... by dbIII · · Score: 2

      If they are talented enough they will work out the difference between work and play.

  2. Not on my watch by nurb432 · · Score: 3, Insightful

    Bringing in non-managed hardware would be a security and support nightmare.

    its one thing allowing a personal phone to hit your email server, ( since connecting to them often means you get some control, such as remote wipe and its no worse than offering webaccess to mail ) but its a far different issue letting people bring in their personal computers and expect to have them on the network.

    No thanks.

    --
    ---- Booth was a patriot ----
    1. Re:Not on my watch by Opportunist · · Score: 3, Insightful

      Pretty much what I was thinking.

      Ask your CSO/CISO what he thinks of that idea and tell me how long it took him to regain composure. Any security conscious company will monitor what machines are connected to their network and refuse "unknown" machines entry, they might get assigned a different network segment or nothing at all, but certainly these machines that are not under my (read: company's) control will NOT gain any access to anything. Even assuming that the owner isn't trying to "steal" anything, who tells me that nothing on the machine is, unbeknownst to the owner?

      You really expect a company to trust its employees to keep their computers clean? Companies that don't even trust their workers to actually, well, WORK when they're at work but feel the need to monitor their presence, behaviour and time on the can?

      --
      We used to have a Bill of Rights. Now, with the rights gone, all we have left is the bill.
    2. Re:Not on my watch by Lehk228 · · Score: 2

      Ask your CSO/CISO what he thinks of that idea

      no thanks, i like keeping my job

      --
      Snowden and Manning are heroes.
  3. Assertive much? by nicholas22 · · Score: 2

    Well, while I'm in charge, they can bring them alright but they can't plug them or use them for anything work related. Won't there be a capacity for company issued devices in five years time?

    1. Re:Assertive much? by Kenja · · Score: 2

      I am reminded of an incident back in the dot com era. Some sales VP got an email with a virus, my security system wouldn't let him open it. His solution was to bring his personal laptop in, hook it into the company network and open the email. The resulting virus explored the entire network exploiting NT security share flaws and zeroing out (not just erasing, but filling with nulls) every MS Office document and source code file it could find.

      --

      "Have you ever thought about just turning off the TV, sitting down with your kids, and hitting them?"
  4. Right! Who is responsible for security? by khasim · · Score: 5, Insightful

    It SHOULD come down to a simple business decision.

    Is the advantage of adding those devices going to bring in more revenue than the extra effort and lost/compromised data is going to cost?

    1. Re:Right! Who is responsible for security? by speculatrix · · Score: 4, Insightful

      I agree, but it's not just the revenues and cost, it's as much about securing the safety of the business's data (and their customers), and demonstrating a duty of care in the handling of that data. In some case there may be a legal requirement effectively preventing ANY use of the corporate network by the invididual.

      Computers provided by the employer should be seen as tools for the job, owned and operated by the employer solely for the benefit of the employer's business.

      If that laptop computer is owned by the business, the business can:

      • deny the user admin rights
      • install only the required applications and deny unnecessary applications (e.g. flash plugins, itunes etc)
      • set up whole disk encryption
      • install an anti-virus toolkit and ensure it is up to date
      • enforce the use of VPNs and proxies for any internet access
      • confiscation of the computer for any reason, such at the moment of job termination

      Many of the above actions are difficult or impossible if the employee uses their own laptop... unless the laptop is simply a thin client, but even then a key logger would be a security risk.

      There is already a big problem with people storing confidential information on laptop computers which leave the workplace. How this can be controlled if staff use their own?

  5. Why Gen Z Needs To Change for Work by Bloodwine77 · · Score: 4, Insightful

    Sorry, no matter what the generation, they should not be allowed to bring more attack vectors and security vulnerabilities in to the workplace.

    They are not special snowflakes, and their personal devices are not necessary for productivity.

    Businesses where mobile devices are useful and helpful should already have their infrastructures designed to handle it, so again Gen Z will make no difference.

    1. Re:Why Gen Z Needs To Change for Work by St.Creed · · Score: 4, Interesting

      So your CEO walks in with his new iPhone and wants to access his mobile reporting solution. The one containing all his sales information. You're telling him he can't?
      And if the CEO has it, his underlings will have it a few weeks later. They still outrank you. You're going to tell them they can't have it? And when all the managers have it, how long will it be before EVERYONE has access?

      Seriously: start preparing, because the tidal wave is coming. It is already happening. 17% of companies now have a "bring-your-own-device" policy in place (a quote from 2 weeks ago by Claudia Imhoff, she spoke at a BI-event I was at). Some provide a choice: company laptop with maintenance or your own device but you do the maintenance. This will grow rapidly.

      Philips was migrating to this policy about 5 years ago. Big companies I'm working for are already preparing for that transition. The ones who are not, will find it very hard to satisfy their interal customers. They will also find retainment of new workers a big problem.

      Ofcourse this is difficult: it is most difficult for those companies that still have software in place with dedicated clientsoftware, beyond MS Office. Companies (like a few where I worked) that started moving away from that and to webbased apps, are in good position to actually profit from this move.

      --
      Therefore, by the (faulty) logic you're using, you're just a cow with a keyboard - osu-neko (2604)
    2. Re:Why Gen Z Needs To Change for Work by fyonn · · Score: 5, Insightful

      yeah, I've heard this thing several times over the last year. all these "innovators" talking about how the next generation of "digital natives" will need to work on their ipads while posting everything on facebook and twitter, but I just don't get it. Why? I don't think the average work environment is so short of people as to be that desperate.

      In fact, my place is in the middle of cutting costs by 40%, so why would they then bend over backwards massively changing internal policy and introducing risk to attract inexperienced, self entitled oiks who by their own admission, want to spend most of the day on facebook rather than actually doing any work?

      Thing is, the company is the one paying the bills, and taking the risks. Where is the business advantage to most businesses to do this? I admit that some more specialised industries that regularly take high skilled graduates may want to do this, but for most industries, i don't see what they'll get out of it?

      dave

    3. Re:Why Gen Z Needs To Change for Work by the+eric+conspiracy · · Score: 2

      The company will supply the CEO with a properly secured iPhone, just like Obama was supplied with a properly secured Blackberry.

      It won't be his personal device. There are too many legal issues associated with having a CEO carrying around a device that doesn't adhere to the variety of requirements of a corporate officer.

    4. Re:Why Gen Z Needs To Change for Work by petes_PoV · · Score: 2

      You're going to tell them they can't have it?

      No of course you don't dent anything to people more senior than you. But have you ever heard a drill sergeat chewing out a squad of officer recruits? There are ways and means (just put "sir" on the end). You tell them "That's a great idea. I'll get right on it. Oh - and I'll need your cost code for this work ..... you do have a cost code, don't you?" or "Yup, sure. Is that the Mark 3 or the Mark 4, cos those old Mark 2's well - they're just not up to it. ... Oh, that's a shame" and any sysadmin worth his/her pay has a cupboard full of responses like these.

      Ultimately, if they absolutely INSIST, just say you'll need to keep it for a day or two to test the integration works OK and then "find" some smut on it, or simply just lose it. Isn't that what all the retail support outfits do?

      --
      politicians are like babies' nappies: they should both be changed regularly and for the same reasons
    5. Re:Why Gen Z Needs To Change for Work by PC+and+Sony+Fanboy · · Score: 4, Insightful

      Sorry, no matter what the generation, they should not be allowed to bring more attack vectors and security vulnerabilities in to the workplace.

      They are not special snowflakes, and their personal devices are not necessary for productivity.

      Businesses where mobile devices are useful and helpful should already have their infrastructures designed to handle it, so again Gen Z will make no difference.

      Sure, you tell the salesman who brings in 150k of business a week for your company that he can't use his new toys to keep track of his contacts. He talks to his boss about the fat guy in IT that drains company resources by depriving him of valuable tools. And then reminds his boss that he makes all the sales that actually pay for IT to exist.

      See how long it takes to change policy. Unless you're in non-profit or government, the folks making the money are the folks calling the shots.

    6. Re:Why Gen Z Needs To Change for Work by Lehk228 · · Score: 2

      a properly secured blackberry is one with encryption enabled and tied to a BES server, a properly secured iphone is one which does not contain anything worth stealing

      --
      Snowden and Manning are heroes.
    7. Re:Why Gen Z Needs To Change for Work by sthomas · · Score: 2

      You are correct that this type of request is common from executive, and that IT bends over backwards to attempt to accommodate it. As the Security Officer of my company, I have a Risk Acceptance form that needs to be signed for this type of situation. It requires a signature by an Officer of the company, and if the requester is an Officer, it requires the CEO's signature. As the Chief Executive, the CEO is authorized to sign his own requests. HOWEVER, all of these forms are provided to the Audit Committee of the Board of Directors during each quarterly meeting, so the CEO is very sure that they are "real" requests that he is willing to support and defend. As the Security Officer, I am required to send a Risk Report directly to the Board's audit committee, and if anyone tried to circumvent the risk process, that would be in this report.

      I'm fortunate that I have the backing of our executive management for this, but I have worked very hard to develop my relationship with our senior management and board. It helps that our company handles data that is subject to both HIPAA and state privacy laws, and mine is very much a "I am here to keep us all out of hot water and off the front page of newspapers" type of role. And all of our managers are mature enough to know that they are responsible should an exception to the rules end up in a loss to the company, so they are very supportive and cooperative with the controls we've agreed upon as an organization.

      The key is cooperation, rather than an us-versus-them mentality between IT, management, and the rest of the business units.

    8. Re:Why Gen Z Needs To Change for Work by Gonoff · · Score: 4, Insightful

      You're telling him he can't?

      Absolutely! Recently,my manager was on holiday and our director walks into the room with a small Android phone and said "Can you connect the new chairmans smartphone to the hospital network?" It was not a request.

      I was able to go up and say "No" without any qualms. I think the lady on the HelpDesk might not have felt so free to do this. I have previously given similar replies to new directors, doctors and (medical) consultants. It requires me to be able to quote the official policies. That is part of my job.

      No, I am not a manager. I do not wear a suit to work. I do not even wear a tie. I am the guy who fixes things. Telling people that they cannot connect their own iphone, netbook, fondleslab or USB toy to a corporate network is basic security. If you have no confidential data to look after perhaps the thought of virus, trojan or spyware ridden systems connecting up to your network does not worry you. If 17% of companies have nothing they need to protect, that is up to them.

      --
      I'll see your Constitution and raise you a Queen.
    9. Re:Why Gen Z Needs To Change for Work by Bacon+Bits · · Score: 3, Insightful

      Sure, you tell the salesman who brings in 150k of business a week for your company that he can't use his new toys to keep track of his contacts. He talks to his boss about the fat guy in IT that drains company resources by depriving him of valuable tools. And then reminds his boss that he makes all the sales that actually pay for IT to exist.

      See how long it takes to change policy. Unless you're in non-profit or government, the folks making the money are the folks calling the shots.

      If this is the kind of response you're getting when you say "no," then you're not very good at the human side of IT.

      In most large organizations I've worked at that have had a functioning IT department, there is a CIO or technology manager whose job it is to listen to both the requests made by employees (especially those made by supervisors and executives) and then listen to the issues presented by the IT personnel who understand the technical issues. This person will then make a decision based on the benefits to the company and the costs and risks (and laws) which impact the business. They then formulate an answer, and present it in such a way that those who disagree with it (either IT or the requester) understand why the decision is what it is and why it must be the way that has been decided. In a well run organization, this IT manager understands that part of the responsibility of IT is to protect the business from employees and to protect the IT employees from compromising situations. In an idea situation, the CEO will back the CIO when questions about technical decisions arise.

      In the situation you present, I would say "Additional services often require additional infrastructure and require additional time to maintain and service. I do not know enough about this specific technology, and I would like to investigate it for you and determine what our business needs will be. It would be irresponsible of me to set this up without fully understanding exactly what it's going to do. I do not want to risk not being able to fix it if it doesn't work or if it has problems in use."

      Usually the response will be "But I just [...]" or "It's only [...]". Some people interpret this as being told what to do by someone who doesn't understand the job. That line of thinking, however, is fueled by ego and leads towards conflict. For my part, I just think they're trying to talk you out of saying "no." People are conditioned to think that if they don't hear "Yes I'll do that immediately" then the answer is "no." I try to answer "I understand why you want this done. I can see the benefits. I just want to make sure that I can do it right so you can actually reap those rewards."

      At this point you're being really reasonable. People are also conditioned to accept a reasonable response, because they know that being unreasonable is likely to harm them more than anything else.

      This gives you something you need: time. Time to build evidence for your case. You can collect the details of what would be required and what the costs would be (including additional infrastructure and additional personnel if there would be a lot of support). Now when you say "no" you have evidence for why your answer is the correct one, and if they say "do it anyway" you can show them what you need (which, again, is reasonable). Without evidence and documentation, you're just butting your ego against the executive, and that doesn't work when you start in a subordinate position. It's very difficult, however, for any person -- no matter how unreasonable -- to continue to flatly argue when you can show them a document which lists the costs in time and money you will require.

      On some occasions, you will meet people who start out butting ego. Regardless of what you say or how reasonable your response, they will not be happy. They will continue to state that their request is really quite simple and extremely important, and will ignore anything you say that doesn't meet with their demands. From your

      --
      The road to tyranny has always been paved with claims of necessity.
  6. I don't think so by perpetual+pessimist · · Score: 2

    It doesn't matter what generation anyone belongs to -- you'll do things the way the employer wants them done, or you won't be employed.

    Now, are there some new technologies that are in common use in the consumer market that can be used effectively in the business environment? Probably, yes. And businesses will use them if it makes sense in their environment. But they won't use them because the pouty-faced punks with their newly-minted college degrees will throw a hissy-fit if the boss doesn't let them use their personal gadgets.

    Business don't give a damn about their current employees, let alone potential future employees. You'll do as you're told if you want the money... and eating is such an addictive hobby.

    Of course, young people just might start up their own businesses where everyone can stay focused on their iWhatevers all day, and if it's better than the old businesses than the young folks will win. I wouldn't put my money in their stock, though.

    1. Re:I don't think so by Arterion · · Score: 3, Interesting

      "It doesn't matter what generation anyone belongs to -- you'll do things the way the employer wants them done, or you won't be employed."

      This is not true, nor is it ideal. If a whole generation of people, or even half of that generation, is willing to continually break the rules to use their own devices, employers cannot commence with the wholesale termination of half their labor force. Production would grind to a halt. There would be economic turmoil.

      No, if they're smart, employers will find a way to use the workers own technology as free capital.

      This is not only a shift in technology, but a whole generation of people communicate differently! Every new mode of communication has been disruptive of the previous: post disrupted the courier, telegraph disrupted post, telephone disrupted telegraph, electronic mail disrupted all the previous, and now we have technologies to send visual as well as text along (PDF attachments, for example) that have disrupted hitherto necessarily paper documents -- are we at all surprised that text messaging, twitter, and facebook should disrupt elements of previous forms of communication?

      This is not a question of "what will employers allow" but rather "how do people communicate".

      --
      "That which does not kill us makes us stranger." -Trevor Goodchild
    2. Re:I don't think so by HornWumpus · · Score: 3, Interesting

      The thing about kids is that they are never even half of your workforce and their are usually plenty more where you found the ones you've got now.

      The ones that can't get over facebook make good waiters/waitresses.

      Employers only need to deal with one year of new hires per year.

      On the other hand if a companies business model is 'Facebook/twitter users are stupid attention whores, we separate stupid people from their money.' their might be value in allowing work access to facebook and twitter.

      --
      John McAfee 'It was like that time I hired that Bangkok prostitute; to do my taxes, while I fucked my accountant'
    3. Re:I don't think so by DarkOx · · Score: 3, Insightful

      This is not true, nor is it ideal. If a whole generation of people, or even half of that generation, is willing to continually break the rules to use their own devices, employers cannot commence with the wholesale termination of half their labor force. Production would grind to a halt. There would be economic turmoil.

      No they won't engage in wholesale termination they will identify a few people they don't like for whatever reason that was not really good enough to justify firing them before, and make a lot of noise like "John Doe" was insubordinate and violated or policy. The rest of you are on notice!

      And the rest of em will realize that the job market is still tough and getting caned because "I could not respect my employers desire for me not to have my IPad on their network is kinda stupid. " Much better to keep collecting that check every two weeks so I can buy toys to play with at home.

      --
      Repeal the 17th Amendment TODAY! Also Please Read http://www.gnu.org/philosophy/right-to-read.html
    4. Re:I don't think so by geekoid · · Score: 2

      Bull - Shit.

      If what you say is true, we would still all be wearing suits, working on green screen terminals, and getting printout vis the teletype.

      "I wouldn't put my money in their stock, though."
      too bad, they are going to have the smart people who make this work. And it's not as hard as people think.

      --
      The Kruger Dunning explains most post on /. http://en.wikipedia.org/wiki/Dunning%E2%80%93Kruger_effect
  7. Not going to happen by tsotha · · Score: 2

    This will not happen in the US outside of some niche industries. Companies have too much legal exposure to take the risk some porn site malware is logging credit card info from all the customers the support people helped today.

    I don't know the laws in the UK, but I suspect the same would apply.

  8. Re:Depends by Larryish · · Score: 2

    True dat.

    Keep your fucking cellphone in your pocket, or better yet, leave it at home.

    Nothing worse than having an assistant or coworker who spends every free second texting everybody and their brother.

    How the fuck are they supposed to stay focused at work?

  9. Re:Depends by Opportunist · · Score: 2

    Not only that, but C-Level executives are also the biggest security problem in a company. I am neither exaggerating nor is it the usual management-bashing.

    Usually they will insist for no good (read: work related) reason on being exempt to content filtering and require local administration rights on their computers. Why? Beats me. Maybe an ego thing, how could that support tech grunt have more "power" over my machine than me? Personally, I had to be browbeat into accepting administrative rights on my machine. No rights - plausible deniability when something hits the fan.

    --
    We used to have a Bill of Rights. Now, with the rights gone, all we have left is the bill.
  10. Why IT Needs To Change for Gen Z by John+Hasler · · Score: 2

    Because "gen Z" is even thicker than "gen Y"?

    they're going to need to get a whole lot more relaxed in general.

    Yes, companies are way too uptight about security. After all, it's not like there have been a lot of breakins or anything.

    BTW what comes after "Gen Z"? Oh. Wait. The Rapture was yesterday. Nevermind.

    --
    Warning: this article may contain humor, sarcasm, parody, and perhaps even irony. Read at your own risk.
    1. Re:Why IT Needs To Change for Gen Z by superwiz · · Score: 2

      what comes after "Gen Z"

      "Gen [", of course.

      --
      Any guest worker system is indistinguishable from indentured servitude.
  11. Re:Push the cost of work stations to the workers by Opportunist · · Score: 2

    Hush, codemonkey.

    I know well how much you want that 12 gig i7 rig to ... well, to do what? Save a second per compile? Learn to code and don't rely on the compiler and linker to find your glaring syntax errors! The next codemonkey that tells me it's too time consuming to compile on his "old" machine should be fired on the spot!

    (well? How does it feel?)

    --
    We used to have a Bill of Rights. Now, with the rights gone, all we have left is the bill.
  12. Re:Pure insanity by fahrbot-bot · · Score: 2

    Most companies don't allow employee devices on the network for perfectly good reasons: to protect their IP and keep malware off their network.

    And companies that support confidential or secure environments, like where I work, don't even allow cell phones with cameras (or other such devices). Some areas/places even require that one leave *all* their personal electronic devices offsite. Yes, the "real world" might be a shock to Gen Z...

    --
    It must have been something you assimilated. . . .
  13. A couple of things there. by khasim · · Score: 4, Insightful

    The ones who are not, will find it very hard to satisfy their interal customers.

    There aren't any "internal customers" because the concept of "customer" contains the element of "choice". If you don't like the service, you go to a different vendor. Internal departments do NOT have that option.

    They will also find retainment of new workers a big problem.

    The implication being that those "new workers" will be worth the additional considerations. I'm sure you can find enough skilled workers who do not demand that you support their personal electronics.

    Seriously: start preparing, because the tidal wave is coming. It is already happening.

    As can be said with most fads and bubbles. The question isn't whether it will be happening but whether it will be a new requirement. Or will it happen and then fade as the security issues become evident?

    Companies (like a few where I worked) that started moving away from that and to webbased apps, are in good position to actually profit from this move.

    Who cares about the software? It's the data that is important?

    Ofcourse this is difficult: it is most difficult for those companies that still have software in place with dedicated clientsoftware, beyond MS Office.

    It's about the data, not the software.

    Losing credit card info is a problem.

    Getting Excel running on your phone is not an issue.

    So your CEO walks in with his new iPhone and wants to access his mobile reporting solution. The one containing all his sales information. You're telling him he can't?

    That depends upon the situation. Do you have read-only access via a secured web site?

    What does he REALLY want to accomplish?

    He is the CEO. But that just means that he is the CEO.
    You can always find a new job.
    It's easier to find a new job while you're still working.
    Rather than AFTER you're fired because the company hits the papers for losing credit card info because of how you put a hole into your security for the CEO.
    And you know that it will be YOU who is fired first and blamed for not keeping the place secure enough.

  14. Re:umm by qubezz · · Score: 2

    The biggest entitlement problem with people and their own devices is they feel like they can use their work time for personal phone calls, tweeting, updating their facebook status, IMing, etc. The policy should be more like steal the company's time, your frickin' fired!

  15. The users have to change too by DarkOx · · Score: 3

    I work in IT security and I have been told in no uncertain terms what my job is by upper management.

    They don't want to find themselves having to put something in the notes to the financials that our trade secrets have leaked, or that our competitors no our costs. They don't want to be embarrassed and have to apologize for leaking customer data. We are a manufacturing company we sell tools to professionals they expect us to be professions as well as look it. Management does not want to look like Sony.

    I don't get off on saying "no" to people. I really don't but if I let a device be connected to the network I have to be able to know DLP policies are being followed. That means I probably have to have more control over your toys than you want me to have, or you have to settle less than great experiences. No you can't read e-mail on your IPhone APP, you can use Citrix to read it in Notes via your IPhone, and yes that probably is to painful to be worth while. We can't afford a large cached copy of your mail file to be sitting on a device you might lose which *may* be recoverable by its next possessor.

    Your personal laptop, certainly if you let me put our full disk encryption software on it, and our endpoint policy enforcement tools and only IT Security gets root. You won't like that though, and I know it. Trouble is I don't have better solutions.

    --
    Repeal the 17th Amendment TODAY! Also Please Read http://www.gnu.org/philosophy/right-to-read.html
  16. Re:Depends by Osgeld · · Score: 5, Informative

    Agreed, it became a issue at my workplace with the guys on the warehouse floor, they are moving large heavy objects while operating forklifts while constantly texting. You cant get their attention cause its also jacked into their ears for MP3, and if you ask them a question they cant tell you what they did 5 seconds ago cause they are totally unfocused on their 1 simple task.

    Starting Monday if we see a celphone on the floor your gone, period.

  17. Re:Depends by Dahamma · · Score: 2

    So true. My favorite exemption often demanded is the (already idiotic and not helpful to general security) policy of periodically changing passwords. We peons are expected to come up with a secure, non-duplicated and non-derivative password every 3-6 months that we can somehow remember, while the executives don't want to change theirs since it was already a stretch to remember their wife's birthday for their current password.

  18. Re:Fuck Gen Z by JockTroll · · Score: 2

    No, don't fuck them. You'll get disease. Take a long, sharpened pole and drive it through their soft, squishy, boneless bodies. Pin them to the ground, pour gasoline on them and set them on fire.

    --
    Geeks are so full of shit that "beating the crap out of them" takes a whole new meaning.
  19. unsurprisingly, IT goons don't get it. by jacks0n · · Score: 2, Insightful

    Wake up!
    You are a cost center.
    You exist only to enable productive people to produce more efficiently.
    You aren't in charge of anything.
    You work for us.
    Continue to annoy us and you will be replaced.
    Just like the guy in the tool room that used to guard the pin gauges and the hammers like he owned them.
    And the facilities guy who refused to add a 30 Amp circuit or run a Nitrogen line.
    The IT support model that treats everyone like a serf doing word processing is over.
    The design engineers need nonstandard hardware to do modeling. They might even need multiple computers.
    In fact every individual user has specific and unusual needs that they understand better than you do.
    And it's Not your call. Make it happen or go extinct. Computers aren't a new special thing anymore.
    Many of us users understand every aspect of your network as well or better than you do,
    we just have better things to do.
    Things that are central to the business and make money.
    Hey, this is your turf, and I understand that change is hard, and that you need to grumble, bitch, rant, whatever.
    get it all out. It won't change anything though.

    1. Re:unsurprisingly, IT goons don't get it. by FlyingGuy · · Score: 2, Insightful

      And we will all snicker as you are shown the door for bringing in your latest whiz-bang gadget and all the crud on it that infects the network and puts the whole thing down for a few days.

      I manage change, I don't fight it. I will let your new whiz bang toy onto the network but you can bet your sweet ass that every packet it sends and receives is monitored and recorded and when the network goes down it is your packet trace I will be showing to the CEO and then he will fire your dumb ass when all of the rest of the people with "better things to do" can't do them.

      When tech's rise to the level of CTO they know how to leave people like you out to twist in the wind hanging from your own petard. Been there, done that., got several t-shirts I wear under my three piece suit.

      --
      Hey KID! Yeah you, get the fuck off my lawn!
    2. Re:unsurprisingly, IT goons don't get it. by vux984 · · Score: 2

      "Many of us users understand every aspect of your network as well or better than you do,
      we just have better things to do."

      Many of you think you do. Most of you don't have a fucking clue about the big picture.

      Part of our job is to provide you the tools you need to be as productive as possible as conveniently as possible.

      The other part is to secure data, and ensure reliability.

      Naturally like any interesting job, these two objectives are at cross purposes. Lean too far either way and the business is sunk.

      "Hey, this is your turf, and I understand that change is hard, and that you need to grumble, bitch, rant, whatever. get it all out. It won't change anything though."

      And after the company loses a few million in lawsuits due to letting staff do X on an infected unmanaged computer at home because some "Gen-Z" XO thought it was more convenient... if the business is still standing maybe you'll let us do our job... no ... you'll beg us to. You write shiny memos proclaiming how important it is...

      Really... this reminds me of companies who have some twit in marketing who said... I need to be able to communicate immediately to be productive... delays putting things past legal are a waste of time and money.

      A few lawsuits later and suddenly everyone remembers why they used to run everything by legal first.

      So, hey, go have your fun, we'll tell you its stupid, you'll do it anyway, and sooner or later you'll figure out we were doing it right all along.

  20. That's exactly what I'm saying. by khasim · · Score: 2

    It's your job to make it work. Yes, make the CEO access his apps MINIMIZING safety issues

    Exactly. And when the reporters come calling for quotes about how the crackers got the credit card numbers from us, it will NOT be the CEO who is fired for the security failure.

    If you can't do it somebody else will.

    Not exactly. Someone else who CLAIMS that they can do it will be hired. What do I care? They'll be the one fired when the reporters come calling.

    There will ALWAYS be SOMEONE who will claim to be able to do the impossible.

    Yes, you can find yourself another job.

    Remember that, people. The company will NOT waste a single moment firing you if it will protect the CEO. You don't owe the company a single moment of loyalty.

    Do your job.
    Collect your pay.
    Advise them as best you can.
    Move on when the situation calls for it.

  21. unsurprisingly, administrivia goons don't get it. by petes_PoV · · Score: 5, Insightful
    Riiiight - just like the quality control guys are a cost centre, and the safety standards people, too.

    IT people are the guys who keep the baddies out of the COMPANY network, the one that you want to connect all your little toys to. They're the ones who are charged with producing the most stuff from the least money, which requires common standards so they don't have to spend hours or days trying to work out why some manager didn't/couldn't read the 1-page of instructions with his/her latest trinket and set it up wrong.

    The point is, we all work for the shareholders and they don't care if you want to use your latest little phone to access stuff. They want the lowest cost of operation, the fewest number of lawsuits for data loss and data thefts and they don't want different individuals craching their company on a daily basis just so they can show off some new status symbol.

    --
    politicians are like babies' nappies: they should both be changed regularly and for the same reasons
  22. Re:Depends by Opportunist · · Score: 2

    You get 3 months between password changes? 'til I started in our company we had a MONTH between changes, with the usual "let your cat jump on the keyboard" PW requirements. Net result? People tacked post-its to their screens. Or into their drawers, when auditors complained about it.

    This is not adding to security, it's reducing security. A friend of mine had a pretty neat idea how to keep PWs secure and at the same time get people to use secure PWs, without even having a PW policy. Ok, he has one policy: You cannot use the same password for at least 20 changes.

    What he did is he wrote a program that continuously tried to crack passwords. If yours was cracked, you had to change it. People very quickly decided it's less hassle to actually use secure passwords (they came and ASKED how to keep the damn system from having to change every other day). Of course, this only works with people who actually need their computers every day so it becomes enough of a nuisance for them to adapt and have an interest in having a secure password.

    --
    We used to have a Bill of Rights. Now, with the rights gone, all we have left is the bill.
  23. Re:umm by Opportunist · · Score: 2

    Funny. I once worked for a company that did exactly the opposite: Do what you want, when you want, how you want. If you don't get your work done, you're fired.

    This of course requires a boss who knows exactly what to (sensibly) expect from his workers. Something quite rare in management to be honest, but in this one company it actually worked. You got your assignment and a fairly reasonable deadline. Sure, sometimes projects run longer and you get an extension. Do it all the time and start looking for a new job.

    They really didn't care too much when I came to work or went home, my weekly hours fluctuated between 20 and 80 hours, depending on workload and how I felt about work. There was no need to be there if all your projects are on hold because you're waiting for something, so I simply took a day off, on the other hand, 15 hours a day and more became necessary when a critical milestone had to be met.

    This can work well if you have a very good management that has a very good idea how much time what tasks take, and can actually produce sensible project plans, can plan around blocks and can parallelize sensibly. Luckily, we had that. It can end in a complete disaster (and usually it does, as many here can certainly vouch for) if management has no idea what production times are reasonable and how to avoid blocking milestones.

    --
    We used to have a Bill of Rights. Now, with the rights gone, all we have left is the bill.
  24. Security is going to get tighter, no laxer by syousef · · Score: 3, Insightful

    My observation has been in the last 5 years security has become tighter and that there has been increased security. I use to be able to plug in my own laptop most places I worked. No longer. I use to be able to use social network sites and external email. Not for a few years now. Everything is getting locked down from SVN repositories to databases. Development environments including. Even developers are losing admin access on their own machines. If anything this trend is accelerating. I don't know what the person writing the article is smoking.

    --
    These posts express my own personal views, not those of my employer
    1. Re:Security is going to get tighter, no laxer by KingMotley · · Score: 2

      It is NOT a bullshit myth. I see it all the time. Developers who don't know what they are doing, don't know why something works, just know hey, if I have admin access it all works. Nevermind the fact that it "works" because his program that is writing crap all over other processes memory space is no longer "access denied", or the developer needed to request a specific privilege instead of asking for complete access. Or the dev has absolutely no idea how ACL's, the UAC, or any other security measure in the entire system works.

      In fact, it was just 2 days ago I slapped a fellow dev's hands because his solution to a problem was getting full access to the system, with full trust privs because he wanted his web application to be able to write anywhere on the system he wanted to make his app work. 2 weeks ago I deleted a whole section of one of our web applications because another developer in house decided he wanted to create a "proxy" page so that he could make some 3rd party piece work -- nevermind that the proxied url was passed in to the page via the query string allowing anyone to shove malware down to people and making it look like it was coming from our server.

      Sorry but you are quite wrong. Most devs ARE clueless.

  25. "bring in" their own kit? by Spectre · · Score: 2

    In five years time, I'd expect people to go back to the way things ran in the 80's, only far nicer and more graphical.

    Use my own computer, at home, connect to the office network, get the equivalent of a virtual desktop of a virtual "work computer" ... do work.

    Why the heck would I, as a developer, database administrator, whatever, need to be in the physical office? It's 2011, right now I wonder why I go to my office in KC, when I'm either working on web apps being deployed to our hosting facility in California or am troubleshooting accounting issues on our Citrix farm somewhere on the east coast ... I don't even know what state the farm is housed in, I don't need to, it's a computer on the net, why would I even care?

    I think the only reason I go to the office now is because the baby boomer bosses like to walk around the halls once a week and see people at their desks ...

    --
    "Flame away, I wear asbestos underwear"
  26. Re:unsurprisingly, administrivia goons don't get i by GlassHeart · · Score: 2

    Riiiight - just like the quality control guys are a cost centre, and the safety standards people, too.

    jacks0n may have been overly harsh, but he makes a good point. A friend of mine was in a certain air force, and his officer once addressed the group. Paraphrased, he said that their only job is to deliver missiles, and if you're not delivering missiles you better be making it easier for somebody to do that. IT is the same: your job is to enable by default, and disable only when you absolutely must. Now, when it's your job to answer for breaches, everything looks like a threat, yet while that's an understandable and useful frame of mind, it needs to be balanced with getting real work (remember, delivering missiles) done efficiently. Safety standards are useful, but there's a reason combat aircraft turn off anti-collision lights on missions.

    In this case, I don't see portable electronics going away. In fact, I see them become more powerful, more highly-personal, and more popular, so IT Departments would be wise to find a way to keep them useful without compromising too much in security. Calling them "toys" or "whiz-bang gadgets" is a rather poor attitude for a geek who's supposed to see their uses better than the unwashed masses.

  27. Re:unsurprisingly, administrivia goons don't get i by Rich0 · · Score: 2

    In my experience the biggest problem with corporate IT is risk aversion. Process is a substitute for trusted personnel, because it is hard to have the latter in a large organization, and it is easy to have the former.

    If there is a massive security breach, the head of IT is likely to get fired over it (or maybe somebody one level down/etc). However, just about anybody in IT is capable of leaving open a door that would allow such a breach. So, there are tons of rules to try to prevent this, and tons of checks to make sure the rules are followed. Of course, a security breach is just one thing that can get messed up, and there are a million other bad things that can happen, and a bunch of rules to go along with each of them.

    In a smaller company you hire people you trust, and actually invest in them. Sadly, that seems to be something lacking in most corporate IT departments. If you can't trust your employees, then you try to control them instead. It sort-of works, but it tends to prevent anything good from happening in the same way that it tends to prevent anything bad from happening. Mostly it is about having somebody else to blame when an underling turns out to be fallible.

  28. Lousy example but the answer is YES. by Chas · · Score: 2

    You give the person a Civic to drive. It's quiet, sedate, cheap, and boring.

    You don't want a delivery employee playing Formula 1 while on the job. It makes them, late for deliveries because they get targeted by the cops and pulled over for driving a sports car (see "Ticket for LOOKING fast")

    Their antics cause a crash and hurt someone? Lawsuit.

    They crash the car on company time, they (and their insurance) expect the company to pay out for repair/replacement. Repairs on a Maserati cost more than BUYING a new Civic.

    At the heart, this is about control of one's network.

    If I say a device doesn't get on the network, it doesn't get on. Period.

    --


    Chas - The one, the only.
    THANK GOD!!!
  29. Saying "No" not good enough, need to find balance by unimacs · · Score: 2

    1. Not all organizations have the same security needs
    2. For many people there aren't neat lines between work life and personal life
    3. Turning this into a turf war doesn't do anyone any good.


    I hope item 1 is self explanatory. There are places where I'd certainly hope that any type of personal device would be barred from connecting to the network. By the same token, there are organizations where it may not be nearly as important.

    As far as item 2 goes my life isn't easily separated into work and personal. I'm sure I'm not alone. Policy at work is that company provided mobile phones cannot be used to make personal calls. They'll look the other way if it's a matter of a phone call here and there. Further a company mobile phone can be taken from me at any time. My calls can be tracked. Any data on the phone, no matter how personal, is available to them any time they want it. A calendar on my phone that only has my work schedule on it isn't adequate, but do I really want to have my marriage counseling appointments on there too?

    Given that reality with a company provided mobile phone, who can blame an employee for wanting to use their own phone instead? As much as we IT folks see allowing personal phones to access our networks and house corporate data as a huge security risk, we have to understand that the desire to do so has a lot of legitimacy. Turning it into a turf war and just saying "No" isn't going to be good enough, even if we are certain it's in the company's best interest.

    Far too often we in IT treat our users in a condescending manner and we move too slow. I overheard a sysadmin guy tell one of our Mac developers that he wouldn't get admin access to his own machine because we had to "protect him from himself". That's pretty much a direct quote. Never mind that the developer in question is far more qualified at configuring and maintaining a Mac than anyone on our sysadmin staff is. It's also very frustrating for staff to wait days or weeks for IT to get around to something that they themselves could take care of in a few minutes. So again, just saying "No" isn't good enough. Reasonable alternatives have to be considered and creative solutions are needed.

  30. Re:What sort of company is everyone working for by petes_PoV · · Score: 2
    That's because a significant proportion of the respondents are not old enough to ever have worked and their only experience of a job is the "borderline-psychopathic bullies" which are the cliche bosses that appear on TV. Personally, I've met two or three who fit the description (most have the easy-going, yet authoratative air that comes with knowing you're in control and to be able to quietly impose your will as you know youre right). They are easily avoided and generally everyone recognises them for who they are and just gets on with running the place despite them.

    However, that doesn't make good TV, hence the table-thumping. Some of these kids are in for a surprise when they grow up.

    --
    politicians are like babies' nappies: they should both be changed regularly and for the same reasons
  31. Re:Really? by Cougar+Town · · Score: 2

    At my work, yes, we would definitely support your needs if that's what we require of you.

    I'm actually a web developer too (with admin/network management as backup to the other guys), and while I don't have quite as many platforms to develop for as you, all my needs are met to support what I do need to develop for. It's what I was hired to do, so the tools I need to perform that job are provided. If tomorrow we have more needs that I'll have to develop for, the tools I require to do that will be budgeted for as part of that need.

    You could definitely manage yourself... the IT department can't be expected to know every piece of software or hardware inside and out. That's part of my/your job. But we definitely don't expect anyone to pay for and bring in their own equipment. We'd make sure you had those 5 mobile devices, those 4 tablets, purchase all that software, give you your various environments (either through physical systems or VMs or a combination of both, and you may be expected to manage those environments as part of the skills you bring to the job), and send you for any required training on any of it so that you have what you need to do what we hired you to do.