Slashdot Mirror


What 'Consumerization of IT' Really Means For IT

snydeq writes "Nathan Clevenger examines the impact that the 'consumerization' of information technology will have on IT organizations, a trend fueled in large part by employee interest in the latest mobile devices, notably the iPhone and iPad. The growing practice of introducing new technologies into consumer markets before industrial markets stands to cause a sea change in the IT/user relationship, Clevenger writes, adding that this will likely involve 'painful changes in the status quo of corporate IT,' including the need to 'shed our arrogance' to give the underlying technology a chance to succeed. 'Although the debate around the impact of consumerization will no doubt continue for some time, the adoption of mobile technologies and enterprise applications is moving forward, whether or not IT departments are on board,' Clevenger writes, in large part because the trend provides companies with a strong opportunity to improve efficiency, productivity, and profit."

214 comments

  1. Sarbanes-Oxley by boristdog · · Score: 2

    'Nuff Said.

    1. Re:Sarbanes-Oxley by Anonymous Coward · · Score: 1

      You can add GLBA and HIPPA for a bigger punch if you're in financial or medical.

    2. Re:Sarbanes-Oxley by Anonymous Coward · · Score: 0

      What the "Consumerization of IT" means to us really:

      - thousands of morons with newly bought insecure devices grab them from the shelves and expect to plug them in behind the firewall at corporations or businesses where trade secrets, GLBA, HIPPA, FERPA, and other privacy or security regulations exist.

      - thousands of morons are trying right now to install Dropbox, or some other crappy "sharing" software, on their work computer - in the process giving yet another way behind the firewall. Then they're putting sensitive company documents "on the cloud" to "share" them with co-workers. Their Dropbox (or other service) password is usually no more complex than 12345, the sort of password a fucking idiot would have on his luggage.

      - IT gets to have phone calls from these morons at all hours from people traveling or just at home, about how their "iPad stopped working." It will turn out in 99% of these cases that the culprit is either their 3G/4G cell provider, or their home wireless internet, being down. No joke, I had to troubleshoot one of these morons about a year ago: it turned out that her AT&T DSL service was down and had been for close to a month, but she wouldn't admit the possibility or even call AT&T until we made her try it when she was visiting her brother in another state and her laptop worked fine in his house (with his open wireless connection). Instead, we were treated to 3 weeks of "why can't you fucking people make my laptop work at home" from her.

      - "I don't see why I should have to change my password on my phone when I change my password on my computer in order to get my email on my phone." *HEAD. DESK. HEAD. DESK. REPEAT.*

      - THIS. RIGHT FUCKING HERE, THIS.

      Shall I go on?

    3. Re:Sarbanes-Oxley by Anonymous Coward · · Score: 0

      Or just throw out the blanket FISMA

    4. Re:Sarbanes-Oxley by justcauseisjustthat · · Score: 1

      Neither of these four laws preclude the use of consumer devices by end users in a corporate environment.

    5. Re:Sarbanes-Oxley by justcauseisjustthat · · Score: 1

      or none of these...

    6. Re:Sarbanes-Oxley by Anonymous Coward · · Score: 0

      when the vast majority of consumer devices have minimal security measures and no capability of encryption, they certainly are precluded.

    7. Re:Sarbanes-Oxley by Chris+Mattern · · Score: 2

      If the device cannot be properly secured so as to ensure the requirements of these laws are met, then, yes, these laws very much preclude the use of the device.

    8. Re:Sarbanes-Oxley by Penguinisto · · Score: 1

      In addition to the regs, I'm just curious as to how the consumer is going to run out and buy things with product names like "Clariion", "Catalyst 6509", "F5 big-ip", "vSphere", "Oracle RAC", "Xeon", and the like. Hell, you'd have a very rough time finding desktops/laptops with SAS drives, dedicated RAID cards, or anything near to using fiber. I also serio

      Sure, some things and components can be consumerized, but I'm just not seeing this 'consumerization of IT' being as all-pervasive as TFA implies that it is.

      --
      Quo usque tandem abutere, Nimbus, patientia nostra?
    9. Re:Sarbanes-Oxley by Penguinisto · · Score: 1

      heh - forget the "I also serio" part... stupid half-completed thoughts... :)

      --
      Quo usque tandem abutere, Nimbus, patientia nostra?
    10. Re:Sarbanes-Oxley by dunng808 · · Score: 1

      This soundss exactly like the reaction of an 80s MIS shop to personal computers. At first they were banned, then they supported by the finance guys (Visicalc, Lotus 1-2-3) who brought in contractors (that was me) to get the tech support not available from the mainframe guys. Now look, we can't function without Outlook and Google, and the PC IT folks are gearing up to ban the next generation.

      Consider this: Information is something you cannot control, any more than you can control people.

      --

      Gary Dunn
      Open Slate Project

    11. Re:Sarbanes-Oxley by hawguy · · Score: 1

      Sure, some things and components can be consumerized, but I'm just not seeing this 'consumerization of IT' being as all-pervasive as TFA implies that it is.

      I had one user tell me that we *have* to support AirPrint so users can print from their iPads. He said that as soon as we do that, IT will save a bundle since people will start abandoning desktops and laptops and move solely to the iPad since printing is the last thing keeping them on traditional computers.

      So I pulled out the last 10 purchase requisitions for computers and pointed out that all of them included dual monitors (even for laptops), and wondered why if people are so willing to work on a 10" iPad screen, they need two 24" monitors to work on a traditional desktop. Is IOS really that much more efficient than Win7 for screen real estate?

    12. Re:Sarbanes-Oxley by Anonymous Coward · · Score: 0

      'Nuff Said.

      as a geek that had to implement SOX at my old job, AGREED!

    13. Re:Sarbanes-Oxley by Anonymous Coward · · Score: 0

      Why would anybody care about this stuff, everything will be "In the Cloud"...

    14. Re:Sarbanes-Oxley by zonky · · Score: 1

      because users will go out and buy services, not servers, which may or may not have robust technology behind them.

    15. Re:Sarbanes-Oxley by wwbbs · · Score: 1

      Computers are tools. The best tools for the job should always be used. If some one can prove the risk:reward ratio is in my favour I'm going to gamble on the quick and dirty solution as well. People do this all the time, people risk their lives to save both time and money. It occurs in every industry; it's called cutting corners. I know of many government agency's in Canada that use Skype, Hotmail, Google Email etc for both business and personal transactions. Little do this people understand is that have the time that information is either routed through or stored in the USA where they should not expect any level of privacy. It's unfortunate but it is often the person in power who lack the basic understanding to make sure things are done properly it's really not there fault, and consider many of them are ultimately earning more financially for being the decision maker they really don't want to share too much if it diminishes either their perceived or true value. That said I have worked with a few great teams that had leaders that knew best to delegate the decisions to the experts they hired.

    16. Re:Sarbanes-Oxley by jon3k · · Score: 1

      I work in IT and you don't speak for me. We work for the users, not the other way around. It's our job to provide them with the best tools for the job, not the tools that are the easiest for us to manage. With an attitude like that we'll never shake the old mentality people have of their IT departments.

    17. Re:Sarbanes-Oxley by BoberFett · · Score: 1

      Users like fads?

    18. Re:Sarbanes-Oxley by said213 · · Score: 0

      Stupid web enabled devices!!! If you are involved in IT and your users aren't familiar with VPN and https, it is your fault for failing to provide competent support.

      --
      help me fix this "Terrible" karma, please!
    19. Re:Sarbanes-Oxley by KiloByte · · Score: 1

      Those dual screens are stacked vertically, right? Since that's the only way to make modern monitors useful.

      --
      The creatures outside looked from Alt-Right to Antifa; but already it was impossible to say which was which.
    20. Re:Sarbanes-Oxley by aix+tom · · Score: 1

      Until it rains......

    21. Re:Sarbanes-Oxley by jon3k · · Score: 1

      iOS has 256bit AES encryption

    22. Re:Sarbanes-Oxley by jenningsthecat · · Score: 1

      That's not 'HIPPA', it's 'HIPAA', as in Health Information Protability and Accountability Act.

      --
      'The Economy' is a giant Ponzi scheme whose most pitiable suckers are the youngest among us and the yet-unborn.
    23. Re:Sarbanes-Oxley by Anonymous Coward · · Score: 0

      Interesting point. I work in IT too, although in a design organization and not an operations or support one. We work for management. Last week corporate management reported record profits - in the billions. This week they are cutting the IT travel budget. We can't work for the users and provide what they need or want because corporate management won't allow it (note this is not IT management). An operating company can come to IT and say, "here is 2 million dollars for this project and the 6 people it will need for 18 months" and we have to say NO to them because we can't increase head count even when the OPCO is paying. That's the world IT tends to operate in. We don't want to say no to our users. We want to enable them to do new things and make new opportunities. We can't. We can't allow devices that aren't encrypted. We can't allow devices that can't use a Smart Card or some secure certificate. We can't allow users to have a password. These are all policies from business management, not IT. And business management makes the rules and pays the bills. I guess it depends on the size of the company. Ours is 60,000 people and 125 countries.

    24. Re:Sarbanes-Oxley by Anonymous Coward · · Score: 0

      You are 100% correct and IT is mainly an expense to many companies but...

      Many companies are cutting IT staff or hiring cheaper lower level IT people because they are a drain to the companies bottom line. Where I work, they are shooting for one IT support person per 100 employees. The company does not buy the new technology for the IT people to mess with first so they can test it and support it effectively, and they don't have pay enough IT employees to support 1000 different bring your own devices. Every "one off" adds an [B]incredible expense[/B] of time and greatly reduces an IT persons efficiency. One trip to a directors car in the garage to get his BT to sync up to his new car takes at least 30 minutes assuming everything goes right. What happens if you need to research his/her specific system and device to get them to work together and then show him/her how to use it as well? What if there car BT system only imports 100 contacts but they want you to import them all? With one tech per 100 people, you just tied up someone for 2 hours and the other 99 people are screwed.

      Bottom line, bringing your own device is great but understand that also have to pay enough IT people to support those devices. All I see is cut cut cut but they desire the same level of support.

    25. Re:Sarbanes-Oxley by Moryath · · Score: 1

      Excellent point.

      You have a large business where lawyers and MBA's have made the rules, and IT is expected to implement the rules they wrote.

      In a hospital in the US, you have to implement policies in line with medical privacy and records security policies that have a basis in federal law.

      In a university in the US, you have to implement policies in line with student record privacy and records security policies that have a basis in federal law.

      In most other places, you are bound by some level of law and PHB-level policy.

      Think about it: crap like this happens. Or this. Or even companies like Apple can 'misplace' a secret prototype.

      And yet, there are those out there who believe that it's the job of IT to "support" every personal device they might bring round to the office, whether it can meet the security and legal requirements of the business or not, and whether or not IT have had a similar device and any chance to research what might be needed to support it ...

    26. Re:Sarbanes-Oxley by rtb61 · · Score: 1

      Especially when computer led "productivity" enhancements in reality are all about replacing people with computing power and also replacing expensive skilled people with cheaper partly trained button pressers. Technically the more powerful the devices, the fewer people required and the lower the skill set needed, hmm, until something goes wrong, then kablowie, it's somebody else's problem and the implementers are out of there with their bonuses and golden parachutes. Mainly because the efficiencies gained do not account for the massive losses and costs when they fail.

      --
      Chaos - everything, everywhere, everywhen
    27. Re:Sarbanes-Oxley by titten · · Score: 1

      The thing is, the best tool for any one user might not be the best tool for all users. Putting aside the cost aspect, an enterprise license for many tools cost more than for one tool, there is the question of both compatibility, fragmentation and duplication. (Security too, of course. That has already been extensively debated)

      Imagine a sales department with 2 Macs and 8 PCs. One of the Mac users decides to use Keynote instead of PowerPoint, stating that it will enable him to create better presentations while increasing his productivity. He goes on vacation, leaving one of the PC users his task of doing the presentation. As he has no way of accessing the presentation it has to be redone from scratch. To versions of the same document, double the work.

      An Excel workbook with all sorts of calculations and macros will not work correctly after a round in Open Office, even if one employee thinks Open Office (substitute with Apple Numbers if you will) is the better tool.

      A group of users may think the external website (knowledge base/ticket handling/code repository( is suboptimal and create a competing version. Confusing the users/customers, duplicating information or maybe even give contradictory information.

      There simply is no best tool if your task is to cooperate using computers.

    28. Re:Sarbanes-Oxley by Ice+Tiger · · Score: 1

      Hate to rain on your parade but the world is changing, employees and customers are becoming technologically enabled and corporate IT will have to adapt. I work for a global healthcare company and this is how we address the issues you raise.

      - thousands of morons with newly bought insecure devices grab them from the shelves and expect to plug them in behind the firewall at corporations or businesses where trade secrets, GLBA, HIPPA, FERPA, and other privacy or security regulations exist.

      Don't let them plug them in behind the firewall, but as important give them a means to access the Internet and come in via your external secure gates into your corporate network. We do this via having a wifi network which is effectively air gapped from the corporate network and they just use our normal Internet access tools to come in. As a side benefit our employees become our beta testers for our consumer orientated channels helping us getting it more right than our competitors.

      - thousands of morons are trying right now to install Dropbox, or some other crappy "sharing" software, on their work computer - in the process giving yet another way behind the firewall. Then they're putting sensitive company documents "on the cloud" to "share" them with co-workers.

      Ask yourself why they are doing this. Generally it is to collaborate with partners in order to give your company competitive advantage and out of frustration with the lack of capability IT supplies. We stop this by either putting the group who want to be fast and take risks off the corporate network and onto their own wifi connected to the Internet or in a longer term by offering IT services that allow secure and easy collaboration between employees and partners. Also all data does not have the same risk associated with it, one size does not fit all. By realising this an investing in education programmes with our employees they start to see security the same way IT.

      Their Dropbox (or other service) password is usually no more complex than 12345, the sort of password a fucking idiot would have on his luggage.

      Education, invest in communication programmes to your employees and also make them data owners, responsibility goes with control.

      - IT gets to have phone calls from these morons at all hours from people traveling or just at home, about how their "iPad stopped working." It will turn out in 99% of these cases that the culprit is either their 3G/4G cell provider, or their home wireless internet, being down. No joke, I had to troubleshoot one of these morons about a year ago: it turned out that her AT&T DSL service was down and had been for close to a month, but she wouldn't admit the possibility or even call AT&T until we made her try it when she was visiting her brother in another state and her laptop worked fine in his house (with his open wireless connection). Instead, we were treated to 3 weeks of "why can't you fucking people make my laptop work at home" from her.

      We've all been there with a nightmare user, I've also encountered employees with a better IT knowledge than some IT staff, it's just part of the modern world. We've addressed situations like this by investing in building relationships between IT and our employees, as above helping them solve business problems rather than just saying no helps with this. Escalating this to her line manager and having good relationships in place where the business are co owners of problems along with IT helps to mitigate problems like the one above. No one, IT or not would see her behaviour as reasonable.

      - "I don't see why I should have to change my password on my phone when I change my password on my computer in order to get my email on my phone." *HEAD. DESK. HEAD. DESK. REPEAT.*

      Educate them, if you're a trusted partner in their business it isn't hard.

      At the end

      --
      "Because we are not employing at entry level, offshoring will kill our industry stone dead."
    29. Re:Sarbanes-Oxley by SavvyPlayer · · Score: 1

      In the enterprise, the tablet will replace the laptop once efficient docking, keyboard, mouse and multiple monitor support exist. High-end (as opposed to the current cadre of browser-based office apps) productivity software will also be paramount (esp., the bastion of finance, the spreadsheet).

    30. Re:Sarbanes-Oxley by vlm · · Score: 1

      'Nuff Said.

      Not really. Its like saying OSHA makes it mandatory for all businesses to provide uniforms for personnel; after all clothing is a safety issue for virtually all non-desk jobs.

      --
      "Science flies us to the moon. Religion flies us into buildings." - Victor Stenger
    31. Re:Sarbanes-Oxley by Anonymous Coward · · Score: 0

      HIPAA

    32. Re:Sarbanes-Oxley by pnutjam · · Score: 1

      Protablity ???

    33. Re:Sarbanes-Oxley by Compaqt · · Score: 1

      >In the enterprise, the tablet will replace the laptop once efficient docking, keyboard, mouse and multiple monitor support exist.

      I'm trying to figure out if this is a sarcastic jab at the current iPad trend.

      I.e., tablets will be good enough for business they have integrated keyboards, mice/trackballs, docking support, and monitor output: i.e., a laptop computer.

      --
      I'm not a lawyer, but I play one on the Internet. Blog
    34. Re:Sarbanes-Oxley by Anonymous Coward · · Score: 0

      Not a jab -- we're talking about one device satisfying both the mobile use case and the desktop use case. Laptops fail the desktop use case without docking, multiple monitors, mice, etc. Why should the tablet be any different?

    35. Re:Sarbanes-Oxley by jon3k · · Score: 1

      Absolutely, I agree wholeheartedly. The management platforms for mobile devices that we're investigating manage all of the major mobile operating environments (Windows Phone, iOS, Android, and even Blackberry).

    36. Re:Sarbanes-Oxley by Anonymous Coward · · Score: 0

      An Excel workbook with all sorts of calculations and macros will not work correctly after a round in Open Office, even if one employee thinks Open Office (substitute with Apple Numbers if you will) is the better tool.

      Sounds like you found a bug in OpenOffice.org. Please submit a bug report, rather than just badmouthing the project on random public forums.

  2. This article was written by Upper Management by Revotron · · Score: 5, Insightful
    Know how I know that? It's four pages long, yet doesn't say anything.

    "As perceptive CIOs seek to transform their rigid, legacy ridden infrastructures into agile, efficient, service-driven delivery mechanisms, they must adopt a pragmatic approach to managing the risks of consumer IT while embracing the benefits.

    I stopped reading right there.

    1. Re:This article was written by Upper Management by Xaedalus · · Score: 1

      Written by Upper Management, for Upper Management, who will then use their special Upper Management powers to make this the norm in their businesses, including probably yours.

      If I were you, I'd keep reading so that I'd make sure to stay one step ahead of my Upper Management, and keep my job.

      --
      Here's to hot beer, cold women, and Glaswegian kisses for all.
    2. Re:This article was written by Upper Management by Registered+Coward+v2 · · Score: 1

      Know how I know that? It's four pages long, yet doesn't say anything.

      "As perceptive CIOs seek to transform their rigid, legacy ridden infrastructures into agile, efficient, service-driven delivery mechanisms, they must adopt a pragmatic approach to managing the risks of consumer IT while embracing the benefits.

      I stopped reading right there.

      Upper management? Nope. Some lucky consultant got a high paying gig that probably only cost him a decent meal for a buddy.

      --
      I'm a consultant - I convert gibberish into cash-flow.
    3. Re:This article was written by Upper Management by pro151 · · Score: 1

      I lose interest in anything when the first 2 to 3 lines start off with gobbledygook.

    4. Re:This article was written by Upper Management by roman_mir · · Score: 1

      nah, I think they used a combination of to write that.

    5. Re:This article was written by Upper Management by king+neckbeard · · Score: 1

      'How the iPad' was when I lost hope

      --
      This is my signature. There are many like it, but this one is mine.
    6. Re:This article was written by Upper Management by LostAlaska · · Score: 1

      Synergy!

    7. Re:This article was written by Upper Management by Anonymous Coward · · Score: 0

      That actually means something. Translated into plain English: the iPad and ts cousins are here. If you don't want to become an obsolete CIO deal with it.

    8. Re:This article was written by Upper Management by Anonymous Coward · · Score: 0

      I thought, "Gee, if all corporations start allowing all devices on their networks, there will be a sudden shift BACKWARDS in time."

      Why? The obvious result from the networks leaking out all their private data...which will return to you can only use the devices we give you.

    9. Re:This article was written by Upper Management by kiwimate · · Score: 3, Insightful

      Well, nice way to judge based on a Gartner quote. It's a shame you stopped reading right there - the very next paragraph shows why this is important.

      In 2005, the idea promoted by Gartner that consumerization would be the most important trend of the next decade might have been controversial. But traction from the iPhone, which went from 0 percent adoption to 80 percent of Fortune 100 companies between June 2008 and June 2010, undeniably demonstrates the powerful impact of this trend.

      Management and business leaders have their own technical language, funnily enough. Just as technologists have developed a specialized terminology to efficiently and unambiguously communicate their thoughts, other niches also have ways of saying things which might appear cumbersome or unwieldy (or downright impenetrable) to outsiders but which have a crisp meaning to the users.

      That paragraph has a fair few buzz words, admittedly, but it's pretty clear what it actually says. Innovation is happening at the consumer device level, and CIOs can look to that arena and figure out a strategy to get the best technology into their environment, or they can let their networks stagnate. Seriously, how hard is that to parse out?

      If you'd gone on further, you'd have seen a fantastic exceprt at the bottom of page two about an IT department for Hyatt Hotels taking the iPad and proving how it could really help the organization. And it's even relatively business buzz word free, for your convenience.

      Ironically, just a wee bit further on is this snippet:

      IT groups have to "shed our arrogance" to give the underlying technology a chance to succeed.

      Next time, get over yourself and read the damn article. You might learn something. Or, there again, with your attitude, you might not.

    10. Re:This article was written by Upper Management by said213 · · Score: 1

      Almost staggeringly not brilliant!

      --
      help me fix this "Terrible" karma, please!
    11. Re:This article was written by Upper Management by Anonymous Coward · · Score: 0

      I didn't bother to RTFA at all.

      If it didn't start out by talking about security, (technical, personal, and legal) than it's way off the mark.

    12. Re:This article was written by Upper Management by Anonymous Coward · · Score: 0

      Wow, someone's a little protective of their synergetic paradigm-shifting buzzwords. What's the matter, don't have any technical knowledge to contribute toward actually getting stuff done? It's okay, there's always business school!

    13. Re:This article was written by Upper Management by suricatta · · Score: 1

      I understand what you're saying, but I can relate to the parent's cynicism. I've been involved in many i-device rollouts to upper management at various companies.

      Most of the time it's pretty darn obvious that the upper managers just want the latest toys to show off to their upper manager friends so they can compare their iPenis sizes. Another reason is because CIOs don't like it when their kids have better technology then they do. So they tell IT to take this technology, implement it now and we can figure out how to integrate it with our actual IT systems later on.

      Guess what? Most of the time these technologies are not enterprise-ready enough to actually fit in corporate environments. Things like security and integration with existing systems aren't considered prior to the rollout. I cannot take an iPad or iPhone, plug it into an MS or Linux based ldap network, and expect it to work as a client. All that time spent building and maintaining user policies is thrown out the window. Hacks and security holes are created just to make things work.

      And what if the IT department pushes back? Well they're getting in the way of progress. Never mind that IT are responsible for keeping the IT infrastructure up and running. And hey if putting this crap in breaks things, then IT is bl00dy useless! How hard can it be?

      The correct approach for any rollout is to identify the requirements before choosing the technology. But this rarely happens because if the requirements can be delivered without compromising the infrastructure, and the solution doesn't involve the guys at the top getting new gadgets, then it's the wrong solution.

      The same thing happened when Blackberry was the new must-have executive toy.

    14. Re:This article was written by Upper Management by kiwimate · · Score: 1

      I can't disagree with you. In fact, the article even supports this by talking openly about the security issues.

      Believe me, I have clients who just don't understand why they can't go to dell.com and order a server and have us plug it into out network. I well remember many years ago when someone circumvented IT and specced out a server on IBM's web site and talked procurement into buying it. They saw big, honking fast, expensive, had to be amazing, right? Problem was the server they ordered was ideal for a specific purpose and completely useless for their purpose. (I forget the details; something like what the client wanted was a database server and they got something that only had three disk slots.) It had to be sent back at great expense and then we had to order the right hardware.

      Anyway, I digress. You make an excellent point about identifying requirements before choosing technology, but there also has to be room for the "let's play" bit. But management has to be able to accept that sometimes a solution is looking for a problem that doesn't exist and that's still a success (you identified, you tested, you determined lack of fit).

    15. Re:This article was written by Upper Management by Revotron · · Score: 2

      I imagine you're a very un-fun person to associate with at parties. Why? Because you have a personal vendetta to correct everybody who tells any sort of joke or exercises any brand of humor.

      It's the internet. Get off your high horse.

    16. Re:This article was written by Upper Management by Revotron · · Score: 1

      In my department, "let's play" happens at the System Engineer/Helpdesk level. A vast majority of our new tech/process implementations stemmed from wanting to solve existing administration and support problems... We get the brand new stuff, we configure it the way it should be, we make it interface with existing systems.

      I'm a firm believer that upper management should never make the fine-grained decisions (which hardware to buy, which software package to implement). Those decisions should only be made based on the recommendation of the technical-level employees and supervisors - in other words, the people supporting the product are the ones who can recommend what we should use and how we should use it. Think of it as eating your own dog food... Upper management doesn't have to support 300 users who all want their Lotus Notes calendars to sync to their iOS devices. The helpdesk jockies are the ones who shoulder that weight.

      My background is in MIS. Believe me, I've slogged my way through many a stuffy case study and decoded plenty of buzzwords. But if you're a CIO, and you didn't already know that mobile devices are quickly wedging their way into our infrastructures, you are a fraud and shouldn't be where you are now. There's a point where you need to put down that free-for-every-CIO magazine and say "Okay, what the hell are we going to do about this? How can we integrate these into our existing systems in a safe and reliable way? How can we enforce policies to keep business data under control and segmented from personal data?"

      That's when you step out of your office, walk down the stairs (no more elevator, stairs = exercise!), approach your tech team and pick their brains for ideas. They're your front lines, they deserve a say.

    17. Re:This article was written by Upper Management by Anonymous Coward · · Score: 0

      I wish I had the mod points to give you +1 Insightful. Too many IT people think that because customer service language, legal language, management language, marketing language, etc, isn't the same as theirs, it must be wrong.

    18. Re:This article was written by Upper Management by bobstreo · · Score: 2

      Know how I know that? It's four pages long, yet doesn't say anything.

      "As perceptive CIOs seek to transform their rigid, legacy ridden infrastructures into agile, efficient, service-driven delivery mechanisms, they must adopt a pragmatic approach to managing the risks of consumer IT while embracing the benefits.

      I stopped reading right there.

      Why did you quit reading? Did you get a Bingo?

    19. Re:This article was written by Upper Management by arth1 · · Score: 1

      In 2005, the idea promoted by Gartner that consumerization would be the most important trend of the next decade might have been controversial. But traction from the iPhone, which went from 0 percent adoption to 80 percent of Fortune 100 companies between June 2008 and June 2010, undeniably demonstrates the powerful impact of this trend.>/quote>
      Buying your CxOs and allowing other suits to use an iPhone to for phone calls and pictures of their children doesn't imply "adoption". It's a perk, not an adoption.

      Once you buy them for the janitors and sysadmins (but, I repeat myself), teach help desk how to support them, and redo your internal applications so they actually work with an iPhone, then you have adopted the iPhone.

    20. Re:This article was written by Upper Management by Anonymous Coward · · Score: 0

      Now you know how your boss feels when you speak.

    21. Re:This article was written by Upper Management by BVis · · Score: 1

      How can we enforce policies to keep business data under control and segmented from personal data?

      By saying "No", a lot of the time.

      Obligatory car-related analogy: "But waiting at the crosswalk for the light to change is boring, and it takes too long, I want to use this vaulting pole!" where waiting for the light to change is securing your communications, and the pole is your iGadget device.

      Management needs to be forced to understand that you can have neat gadgets/convenience, or you can have security. Not both. One or the other. If your management refuses to understand this, either 1) get a different job or 2) get it IN WRITING, not just in an email, that you've been asked to override a security policy so that the Vice President of Things That Start With H can have an iPad to play Angry Birds on.

      --
      Never underestimate the power of stupid people in large groups.
    22. Re:This article was written by Upper Management by Karl+Cocknozzle · · Score: 1

      This comes up every couple years when there's a new doo-hickey-thing-a-ma-bob released (now with Sprinkles!) and the users of the world clamor for it.

      When IT insists these devices be vetted for "security and compatibility" they're accused of "foot-dragging, turf-protection, and ivory-tower arrogance!" If they just allow people to use anything and there's a security breach IT is blamed for being "lax about security." The classic Kobayashi Maru "No-win scenario" for the IT admin.

      Your best hope is to state your case as eloquently and non-emotionally as you can, and if they still want to be on the bleeding edge get them sign a waiver that says they:

      1) They acknowledge they are potentially opening serious security holes in the network.
      2) They acknowledge those holes could potentially represent hundreds of thousands or millions of dollars in losses due-to potential compromise of proprietary business data.
      3) They acknowledge that they are disregarding advice to the contrary from you, an expert in a position to know what's best by proceeding, and agree they alone are responsible for the decision.
      4) They agree if they subsequently decide to fire or discipline you for any reason whatsoever (including bankruptcy caused by security breach lawsuits) your severance pay is 20 years salary. In the old days you'd probably just accept the provision "fired or disciplined because of this decision" but since corporate HR sleaze knows no bounds, you can guarantee any firing over this would be over "the time you didn't turn the coffee-pot off" or some such nonsense as a means of weaseling out of paying.

      Get it signed in writing (hard-copy, on paper,) file a copy with HR, corporate counsel, and the like, and keep your copy at your lawyer's office. If there is every any problem you've got your insurance policy. The 20 years salary is designed to discourage making you the scapegoat for the problem, and if they do, to provide for your family since your security career would likely be effectively over at that point.

      --
      Who did what now?
    23. Re:This article was written by Upper Management by Anonymous Coward · · Score: 0

      Too many IT people think that because customer service language, ...management language, marketing language, etc, isn't the same as theirs, it must be wrong.

      To be perfectly honest, frequently it is wrong.

    24. Re:This article was written by Upper Management by Anonymous Coward · · Score: 0

      http://www.inforworld...

      Never mind.

    25. Re:This article was written by Upper Management by bobcote · · Score: 1

      As usual Gartner is behind the curve. I saw evidence of consumerism 30 years ago when a couple of "rogue traders" in the Boston office of Merrill Lynch Capital Markets brought couple of Apple II computers into the office to track data with a database application that IT, then DP, said they would get to in the next two years. They used an acoustic coupler modem to get mainframe data that the mainframe thought it was sending to a terminal/printer. Fast forward to 2011 and we have people at large companies doing their own off-site data back ups because IT's solution is clumsy and lacks full redundancy.
      The trick is to make IT think it's their idea. And the trick for Gartner is to make IT management think Gartner predicted it.

       

  3. "arrogance"? by khasim · · Score: 4, Insightful

    Clevenger writes, adding that this will likely involve 'painful changes in the status quo of corporate IT,' including the need to 'shed our arrogance' to give the underlying technology a chance to succeed.

    I don't think you understand what "underlying technology" means.

    This isn't about the wireless standards that the phones adhere too.
    Or any of the other REAL technologies.

    This is about security and accountability.
    Who is responsible for the data on your iPad when it is stolen?
    What is the process AFTER it is stolen?

    1. Re:"arrogance"? by Anonymous Coward · · Score: 0

      cry like a little girl when your corporate secrets are leaked by Anonymous or Wikileaks.

    2. Re:"arrogance"? by Moryath · · Score: 1

      Watch all the companies run for the hills the first time Anonymous or Wikileaks gets a ton of data some fool stored on an insecure, wide-open "Cloud Service" like Dropbox...

    3. Re:"arrogance"? by fidget42 · · Score: 1

      The company for which I work is developing their plan for allowing people to use employee owned tablets and smart phones. Some of the requirements are that the device be kept locked and that they grant the company the ability to remote wipe it. I don't have any problem wth this requirement because I would want the device wiped anyway. There are other security related requirements, but that is just the cost of being able to use your phone/tablet.

      --
      The dogcow says "Moof!"
    4. Re:"arrogance"? by Anonymous Coward · · Score: 0

      that is the more feasible way this can and prob will happen.

      device encryption is a MUST if BYO does come to pass as tons are guessing. i work in upper realms of IT (application deployment, computer image maker/maintainer, uber geek of the firm) and see this already starting to happen.

      however security is still the biggest thing holding back the BYO era from taking its first real step. oh yea, and the fact that most users don't want to have a password. really?? a 4 digit pin is too much to atleast semi protect your personal life, ie mobile phone.

    5. Re:"arrogance"? by Anonymous Coward · · Score: 0

      > This is about security and accountability.
      > Who is responsible for the data on your iPad when it is stolen?
      > What is the process AFTER it is stolen?

      Yadda, yadda, yadda... all this is great, but...

      Who is responsible for making the computer work in the first place?

      I'm tired of our IT dept machinations to hold everything secure and, in the process, making the computer unusable. I need not to cite names, just picture a weekly virus scan from 2 to 5 PM on Wednesday and the 4GB RAM computer slower than a 4-op calculator.

      Now imagine having to use Vista and being unable to delete files (surely an advanced OS function) or create a new folder (I wonder how can one break Windows to make it have trouble creating folders). Or getting a nice message from W7 stating it encountered a "critical error" and must restart... (btw, is this any different from a BSOD?)

      It's arrogance, no doubt, and worse... it's from people who know little but get nearly impossible tasks.

      I get a lot more done with Linux at home than with IT support and M$ at work.

    6. Re:"arrogance"? by Anonymous Coward · · Score: 0

      Your Apple will take care of it.

    7. Re:"arrogance"? by drinkypoo · · Score: 1

      Some of the requirements are that the device be kept locked and that they grant the company the ability to remote wipe it.

      IOW the device becomes the company's.

      How about putting the data in some format where it won't be cached on the handheld and letting mobile users access it while connected? Like, say, in flash? Oh wait, IOS devices don't have flash. Since Apple is a dick, I guess the remaining option is to write some kind of dynamic application that delivers the data in a form the user can't conveniently save, such as image data.

      There are other security related requirements, but that is just the cost of being able to use your phone/tablet.

      Giving someone else the right to remote wipe the device is not a working solution. That gives away control of your device. If the device is useful to me and they need that much control over it they should buy me one. If we used a more terminal-mainframe mentality as we should have been doing all these years instead of adopting stupid Windows for stupid reasons, then this would be a non-issue today because we would already be expecting the data to live on the mainframe and for our access to it to be dependent on the network. For that data which the user seriously needs (e.g. in the case of a physician, a drug interaction database -- not that they would fucking look at it anyway, a friend of mine went in to the hospital for Meningitis yesterday, and she would have had the wrong thing in her IV if not for an observant nurse -- then the doctor went off-shift and failed to transfer her to another physician... fucking doctors will kill you faster than being sick) then the data can be stored on the device. For sensitive data, the data can not be. The critical data (charts) should continue to be printed out for use during power failures just as it is today. And maybe physicians should read them.

      --
      "You're right," Fisheye says. "I should have set it on 'whip' or 'chop.'"
    8. Re:"arrogance"? by Anonymous Coward · · Score: 0

      What we have here is the modern equivalent of a pony express, where the stablemaster is being harrassed to let Joe, the new recruit, use ride across five states on his sick donkey.

      The solution? Specify a minimum standard the user's own animals must meet, and that they be regularly certified fit for duty buy a vet willing to pay up if they drop dead.

      Modern equivalent: you can use your own machine, but then you have to pay for your own sysadmin.

  4. IE6 for iPad by Anonymous Coward · · Score: 0

    Get that, and your boss will be rolling out Ipads company wide. VNC programs don't count of course.

    1. Re:IE6 for iPad by spire3661 · · Score: 1

      http://www.pcmag.com/article2/0,2817,2387436,00.asp. If OnLive can do decent gaming over the net, im sure remote desktop wont be a problem.

      --
      Good-bye
  5. About time. we are talking about this by spire3661 · · Score: 1

    MIDS are going to march into corporate I.T. like a storm. A huge sea change in the way we develop and deploy solutions is coming. We are seeing the beginning of the end of MS as the corporate go-to solution, at least their current offerings. Sure people will still use MS infrastructure crap for decades, but the desktop as we know it is going to die. Your computer is going to be a MID that docks when you get to your desk and then syncs to the cloud storage (intra/inter-net). When it docks up it will be much like a traditional desktop you see now.

    --
    Good-bye
    1. Re:About time. we are talking about this by 0123456 · · Score: 4, Insightful

      Your computer is going to be a MID that docks when you get to your desk and then syncs to the cloud storage (intra/inter-net). When it docks up it will be much like a traditional desktop you see now.

      Right. So you're going to take your corporate desktop home with you in your pocket, and when you accidentally leave it on a train...

      No corporation in their right mind wants people walking out the door with documents and software that they don't have to take out of the building with them.

    2. Re:About time. we are talking about this by blair1q · · Score: 1

      Right. So you're going to take your corporate desktop home with you in your pocket, and when you accidentally leave it on a train...

      If it's actually protected by a password, and the documents are encrypted, no problem.

      If not, it sounds like IT forgot to remind people of how to secure data, and instead were relying on people not copying things from their unsecured network.

    3. Re:About time. we are talking about this by Anonymous Coward · · Score: 0

      No corporation in their right mind wants people walking out the door with documents and software that they don't have to take out of the building with them.

      Yo, pops, I hear they have this newfangled invention that people are starting to use; it's called a laptop. I'm sure it will never catch on but if you can tear yourself away from your punched cards for a moment, maybe you should look into it.

    4. Re:About time. we are talking about this by NevarMore · · Score: 2

      Right. So you're going to take your corporate desktop home with you in your pocket, and when you accidentally leave it on a train...

      No corporation in their right mind wants people walking out the door with documents and software that they don't have to take out of the building with them.

      Are they hiring? That would free up a good 15GB of code checkouts from my laptop and there'd be no chance of getting work done on the plane trip to the next on-site meeting.

    5. Re:About time. we are talking about this by Troke · · Score: 1

      IT also forgot to tell them not to set their password as password, 1234, or their birthdate.

    6. Re:About time. we are talking about this by hawguy · · Score: 1

      MIDS are going to march into corporate I.T. like a storm. A huge sea change in the way we develop and deploy solutions is coming. We are seeing the beginning of the end of MS as the corporate go-to solution, at least their current offerings. Sure people will still use MS infrastructure crap for decades, but the desktop as we know it is going to die. Your computer is going to be a MID that docks when you get to your desk and then syncs to the cloud storage (intra/inter-net). When it docks up it will be much like a traditional desktop you see now.

      I really don't understand the whole MIDS thing -- why would I want a device in my pocket powerful enough to run my financial forecasting spreadsheets and display them across 3 monitors? Seems much better to have a central repository for my data (i.e. my office network) and VPN in to access it remotely. Or at the very least, carrying a 32GB MicroSD card around with all of my data seems much more portable and easier than carrying some powerful MIDS. I can keep that MicroSD card in my phone so I can look at a spreadsheet on the train.

      In reality, my company uses a remote desktop server - I disconnect my session when I pack up for home, and reconnect again at the office and pick up where I left off. Works well. I can connect with my Android, but the small screen makes it pretty worthless for real work.

      Interestingly, in the past 2 weeks I've had 3 people turn in their iPhone or Android phone asking for a Blackberry because:

      1. Battery life is much better
      2. Email integration is much better

      I can't imagine that a quad core MIDS that is powerful enough to run my office applications is going to be any easier on batteries than my Android device that needs charging every 18 hours (assuming light use).

    7. Re:About time. we are talking about this by Anonymous Coward · · Score: 0

      Right. So you're going to take your corporate desktop home with you in your pocket, and when you accidentally leave it on a train...

      No corporation in their right mind wants people walking out the door with documents and software that they don't have to take out of the building with them.

      Why do you assume that there needs to be any corporate data on the device at all?

    8. Re:About time. we are talking about this by Anonymous Coward · · Score: 1

      In my view, it's not about removing data. That will happen. It's about ensuring that the data is appropriately secured with robust tools.

      Presumably, you use full-disk encryption (if not, you're an idiot).

      The iPad can't do that.

      Do you have a VPN to securely access your environment?

      The iPad can't do that.

      Your IT department pushes security hardening templates to your machine through GPO in a Windows environment (or they should be).

      The iPad can't do that.

      Your company is (should) be requiring two-factor authentication for many data transactions. Again, they may be lazy, or behind the curve on this, but in my view it's a bit insane not to.

      The iPad can sometimes do this in a half assed way....

      Your laptop probably had detailed logging of system events and can relay this to a central server for aggregation and analysis via inexpensive tools (see lazy, cheap, stupid above).

      The iPad can't do this either.

      Best practice dictates enforcing strong security for internal-wireless, such as machine certs backing EAP authentication with verification of the upstream cert on the device.

      The iPad can't do any of those 3 things.

      To avoid the challenges of wireless, a wire is recommended, but very secure organizations are going to use a NAC solution that prevents connection of unauthorized endpoints to the wire.

      The iPad can't do this.

      Keep in mind that Windows can do 100% of these. Mac and Linux can do about 80%, so far.

      Perhaps in organizations that play the "oh well security is nice but...." game (like Sony, and so many others), the iPad is fine because it represents status quo. Remote wipe sounds shiny! But it's not security.

      But in an organization that takes security seriously, or is required to take security seriously, its unquestionably immature technology. Grossly immature.

    9. Re:About time. we are talking about this by Anonymous Coward · · Score: 0

      The military will be big on this. I can see it now, iPhone sockets in tanks.

      Once they remember to tell everyone to protect their little devices, so that a private can't leak much of their secret data to the world.

    10. Re:About time. we are talking about this by BoberFett · · Score: 1

      And we've never heard of laptops being lost and compromising vast amounts of corporate data. Let's let even the lowliest of n00bs have everything on their phone!

    11. Re:About time. we are talking about this by spire3661 · · Score: 1

      I don't understand this. Cant it do both? Can't it be both a cloud end point for some types of data and a data processor for others? Laptops suck. Plain and simple. They are 30 years of design kludge. I would rath focus on making useful tablets and software to bridge the gaps then continue to push the current desktop/laptop paradigm. I would rather we design tablets with great peripheral integration, and the ability to become desktop/laptop with accessories.

      --
      Good-bye
    12. Re:About time. we are talking about this by Anonymous Coward · · Score: 1

      No corporation in their right mind wants people walking out the door with documents and software that they don't have to take out of the building with them.

      Must be nice living in Bizarro World. Here in the real world, pretty much every corporation would absolutely love to be able to have their employees take all their work home with them. About the only people complaining are the whiny IT departments.

      As for leaving data on the train - nobody outside the non-important 'small' corporate world cares. Who's going to do anything about it? The government? Oh no, here come the 'fines'. Hahaha. Fines of less than the paper the C-level bonus paperwork is printed on.

    13. Re:About time. we are talking about this by 0123456 · · Score: 1

      I don't understand this. Cant it do both? Can't it be both a cloud end point for some types of data and a data processor for others?

      Yes. And unicorns will fly out of its butt while doing so.

      I would rather we design tablets with great peripheral integration, and the ability to become desktop/laptop with accessories.

      But you just said that laptops suck. Now you're trying to build a kludgy pseudo-laptop out of a tablet with a ton of accessories, which will cost twice as much as a more capable laptop.

    14. Re:About time. we are talking about this by Culture20 · · Score: 2

      If not, it sounds like IT forgot to remind people of how to secure data

      I remind them *how* all the time. That doesn't mean they understand me, or that if they do understand me, that they are willing to actually do it.

    15. Re:About time. we are talking about this by darth+dickinson · · Score: 1

      Do you have a VPN to securely access your environment?

      The iPad can't do that.

      To be fair, there *is* a Cisco AnyConnect VPN client for iOS devices. I use it on my iPod Touch from time to time. There's also an integrated IPSEC client.

    16. Re:About time. we are talking about this by Anonymous Coward · · Score: 0

      MIDS are going to march into corporate I.T. like a storm. A huge sea change in the way we develop and deploy solutions is coming. We are seeing the beginning of the end of MS as the corporate go-to solution, at least their current offerings. Sure people will still use MS infrastructure crap for decades, but the desktop as we know it is going to die. Your computer is going to be a MID that docks when you get to your desk and then syncs to the cloud storage (intra/inter-net). When it docks up it will be much like a traditional desktop you see now.

      Sooooo in essence you mean we are going to give everyone laptops? I can tell you how well that sits with management at the moment.

      Also allot of people turn upto work then go home at the end of the day. the last thing they want to do is take work home with them.

    17. Re:About time. we are talking about this by Anonymous Coward · · Score: 0

      spire3661 is a lying salesman type who sells pads. Acknowledging the realities of rollouts isn't his thing: promising the moon to gullible CEO/CFO types knowing damn well he will never fucking deliver on the promises but it'll be too late for them to return the stuff when they figure that out? That's his stock in trade.

    18. Re:About time. we are talking about this by jp10558 · · Score: 1

      This actually seems to me like again expecting me to buy tools for my job for the company rather than having the company purchase the tools for me to use. Which I suppose could be ok (I think many mechanics etc work like this), but with the company likely wanting ownership over how *my* device works.

      My property, my rules. Company property, company rules IMO. This is why my Droid 3 isn't connected to the central Exchange server, they don't get to wipe my personal property.

      --
      Opera, Proxomitron-Grypen,GPG 0x0A1C6EE3
    19. Re:About time. we are talking about this by jp10558 · · Score: 1

      I just wish there was an Android etc OpenVPN client without having to root the device.

      --
      Opera, Proxomitron-Grypen,GPG 0x0A1C6EE3
  6. lock down by Anonymous Coward · · Score: 0

    I miss lock down - we were much more efficient - oh well thank goodness we can always outsource to asia when we need actual work done

  7. This article was written by InfoWorld by RobotRunAmok · · Score: 1

    I stopped reading when I saw snydeq's name in the byline. He's their corporate communications shill who handles most of the pay-for-press astro-turfing InfoWorld does on slashdot.

    The funny part is that InfoWorld is paying for what has been sold as Upper IT Management eyeballs and credibility within the slashdot audience, but the days when slashdot reached that crowd are long gone. These days slashdot readers are predominantly the young gadgeteers, hobbyists, and geek wannabes who most likely don't have any idea why an iPad or iPhone would be a threat to their IT Department. Most probably didn't even know their high school HAD an IT Department...

    1. Re:This article was written by InfoWorld by Anonymous Coward · · Score: 0

      I am in IT Management (not upper yet, but soon... soon...) where should i point my IT Middle Management Eyeballs at so that this astroturfing is appropriate.

    2. Re:This article was written by InfoWorld by Anonymous Coward · · Score: 0

      I stopped reading when I saw snydeq's name in the byline. He's their corporate communications shill who handles most of the pay-for-press astro-turfing InfoWorld does on slashdot.

      The funny part is that InfoWorld is paying for what has been sold as Upper IT Management eyeballs and credibility within the slashdot audience, but the days when slashdot reached that crowd are long gone. These days slashdot readers are predominantly the young gadgeteers, hobbyists, and geek wannabes who most likely don't have any idea why an iPad or iPhone would be a threat to their Business. Most probably didn't even know their high school HAD an IT Department...

      FTFY

    3. Re:This article was written by InfoWorld by jp10558 · · Score: 1

      Hmmm, I'm an IT professional - not management, but not a hobbyist...

      My main problem with the article is that it for some reason assumes that for IT the random end users should be setting business policy. This seems patently absurd to me - any business I've worked in doesn't let the individual employees actively set Legal, Financial, strategic, purchasing, etc policy so why does it make sense for IT?

      That's not to say I wouldn't support an iPad, just that the mandate for it should come from management, not an end user who got a new birthday present.

      --
      Opera, Proxomitron-Grypen,GPG 0x0A1C6EE3
  8. Management material! by Anonymous Coward · · Score: 1

    in large part because the trend provides companies with a strong opportunity to improve efficiency, productivity, and profit.

    That's the most management-speak heavy way of saying, "we can make the poor fuckers work EVERY MINUTE of the day" I've ever seen! Somebody call the Bobs! ;)

  9. Mod parent up. by khasim · · Score: 2

    From TFA:

    According to Robert Stephens, founder of the Geek Squad and CTO at electronics retailer Best Buy, the iPad is ... it. You can customize and order a pizza from Papa John's right from your iPhone. IT no longer has the unique set of knowledge about what is possible. The user now knows what they want, and they can and will demand it from IT."

    There is a HUGE difference between ordering a pizza and keeping confidential documents on your iPhone.

    The best part is that the Best Buy CTO cannot identify his own advances. He has to reference a PIZZA VENDOR.

    And that is a WEBSITE. What does that have to do with an iPhone? You could do the same thing with a desktop or a laptop.

    1. Re:Mod parent up. by Anonymous Coward · · Score: 0

      And that is a WEBSITE. What does that have to do with an iPhone? You could do the same thing with a desktop or a laptop.

      Or actually, you know, make a fucking phone call from that there iPhone.

  10. already in progress. iPads are the new laptops. by Anonymous Coward · · Score: 0

    The company I work for has been working on integration plans for iPads and iPhones for some time and we are currently engaged in a phased rollout. These are now the devices that employees are comfortable with and prefer using, and are ever more displacing the laptop as the portable devices of choice. This creates significant challenges for IT in security and other areas, but it is necessary that these issues are solved. A change in computing is happening under our noses, with the move to tablet computing and mobile devices like the iPhone.

    Of course a few stodgy sorts are bemoaning it, but I've been around a while and I remember the same kinds of people bemoaning the transition from 68K based Suns to x86-based PCs. It's exactly the same mentality now that doesn't like to see things change. But, things WILL change. You can accept it or not, but wishing it away will not change the reality.

    iPads are the new laptops.

  11. ...yep by msauve · · Score: 1

    Next thing you know, IT departments are going to have to get rid of their IBM 360 mainframes and DEC PDP-11s, and start supporting those new-fangled "personal computers."

    --
    "National Security is the chief cause of national insecurity." - Celine's First Law
  12. I'll field this one. by khasim · · Score: 2

    If not, it sounds like IT forgot to remind people of how to secure data, and instead were relying on people not copying things from their unsecured network.

    Didn't you get the memo? IT is "legacy" now. It's all about empowering the end-users to develop their end-user creativity without the restrictions of the IT way.

    If keeping un-encrypted documents on an un-managed device without a password helps that end-user be more "productive" then who are YOU to say no?

    IT didn't forget to remind anyone. This is about taking IT out of the loop. Because IT is holding back the end-users and their iPads.

    1. Re:I'll field this one. by blair1q · · Score: 2

      Yes, IT is holding back the end-users and their iPads.

      It's always the end-user's responsibility to safeguard data, whether it's on their iPhone or printed out in their briefcase.

      IT, by trying to be in control of everything, insists on disempowering users by refusing to allow them to use any such devices.

      It's false security. It costs more than the problem you're trying to prevent. Give the user an encrypted container and show them how to use it and tell them that's where all business data goes.

      Enterprise Software is no longer a productivity driver, and bloated IT departments are wasted bureaucracy.

    2. Re:I'll field this one. by said213 · · Score: 0

      You have never been a "fired" IT worker before, have you? We are expected to know more about this than the end user... That includes adequately informing them. Sometimes it also involves refusing to support or accept utilization of devices which cannot be directly supported.

      --
      help me fix this "Terrible" karma, please!
    3. Re:I'll field this one. by SecurityTheatre · · Score: 1

      I have conducted user training on password complexity.

      Then I did a password audit a few months later and the percentage of users using "password123" or a permutation of that had declined from 20% to 18%.

      Disempowring them, was, unfortunately, the only effective solution.

    4. Re:I'll field this one. by CycleMan · · Score: 1

      It's fine to tell an individual, "Here are the keys to the car you just purchased. Here is how to lock it so others cannot steal it. Here is how to unlock it so that you can enter the vehicle and drive. You're on your own now." But when you give them the ability to lock and unlock other peoples' stuff (i.e. corporate intellectual property generated in a company of more than one person), there exists a responsibility to those other persons. Most organizations have found that, left to one's own devices, mankind prefers ease-of-use to safety and security, and mankind also has crooks and thieves. Since not every user will operate at a level of security necessary to safeguard everyone else's data, central choke points and defense-in-depth become necessary. Yes, there can be false securities established, but this is probably not one of them. More likely, the user's belief that "nobody will guess my iPhone swipe password" is false security, and "I'm not important enough in this big company for my login to be a target" is false security.

    5. Re:I'll field this one. by blair1q · · Score: 1

      Nobody's ever been given the keys to a company car?

  13. Re:already in progress. iPads are the new laptops. by Anonymous Coward · · Score: 0

    Name one good CAD system or production-level ERP system that'll run on an iPad.

  14. No different than what the drug companies did by Anonymous Coward · · Score: 0

    Look, after years of going around schlepping their drugs to doctors, the pharm companies realized that they were going about it all wrong. Instead, they took their message to the masses, and let self-diagnosing consumers tell the doctors what they wanted.

    Now, IT providers are doing the same thing, and if IT service companies (which is all any IT department really is) want to keep their piece of the pie they'll do like the doctors did and get on board.

    1. Re:No different than what the drug companies did by CyprusBlue113 · · Score: 1

      Look, after years of going around schlepping their drugs to doctors, the pharm companies realized that they were going about it all wrong. Instead, they took their message to the masses, and let self-diagnosing consumers tell the doctors what they wanted.

      Now, IT providers are doing the same thing, and if IT service companies (which is all any IT department really is) want to keep their piece of the pie they'll do like the doctors did and get on board.

      Have you noticed how med costs have changed the last few years? =)

      --
      a handful of selfish greedy people are no match for millions of selfish, greedy people -u4ya
  15. 'shed our arrogance' by Anonymous Coward · · Score: 0

    Speak for yourself Mr. Nathan Clevenger.

  16. Re:already in progress. iPads are the new laptops. by Anonymous Coward · · Score: 0

    noooooooooooo!!!!!

  17. why people should read history. by fermion · · Score: 1
    Most of our problems, such as the current debt debate over something that has happened many times before, is because some people, especially those that can't read or think they are gods. Things always change. The powerful aristocracy always falls. The proletariat always finds a way to gain additional power. Of course most of the proletariat don't read history, so are fooled by the naysayers that prognosticate the fall of civilization is the rich and powerful are in any way inconvinenced, so we get lame articles like this.

    In this case there was a time when programmers had to smart. Super smart. They programed bare metal, which was inefficient for may purposes, so as computer became more powerful, more abstract languages were created, APIs were developed, and not almost anyone can program. Did businesses die because we had more programmers. No, in fact they prospered as software costs fell.

    There was a time when if you wanted something done on the computer you had to go and beg the administrator to so do. Later on you had a terminal so you could complete simple tasks, but to do anything real you still had to beg. Then we started getting Apple and Compaq computer in corporate. OMFG, the user has the ability to do work without the approval of god. The world is going to end. Of course it didn't, and of course the control freaks standardized on MS/Intel machines because otherwise someone might acutally be allowed to get real work done and really innovate, but the overal point remains valid. Firms prospered. At least those that found the right balance between control and innovation.

    Mainframes and low level programming still have a place, but the GPC is a stand alone machine coded predominately through APIs, with very little else. Firms that are going to remain profitable without huge subsidies are going to have to leverage the current tech into their overall strategy, and minimize the power of those that are afraid of losing their cushy jobs due to change. That is what change is, and where savings come from. Firing people that were needed under the old tech. It is heartless, but reality. We can't keep an aristocracy just for the sake of nostalgia.

    --
    "She's a scientist and a lesbian. She's not going to let it slide." Orphan Black
    1. Re:why people should read history. by jon3k · · Score: 1

      Best post in this thread so far

    2. Re:why people should read history. by Attila+Dimedici · · Score: 1

      The thing is when PCs entered the business world, we had the same articles about it meaning the death if IT and its control over how and where we use company data. The thing is, over time, IT became even more important as people started to rely on the data being stored on computing devices to a greater degree. We even had a bunch of laws passed which made companies responsible to control their data.
      Every decade or so, we have some new consumer computing device come along and people say, "We have to loosen the strictures and controls that IT has over corporate computing devices so that we can get the enhanced productivity these new devices offer." So, upper management overrides IT and demands that these devices be allowed. Sometime after this there is a data breach and upper management wants to know why IT allowed it to happen. Now that the devices have been around for awhile, IT has figured out how to secure them and implements such security. Right about that time, people start saying, "If I need this to get my work done, why doesn't the company supply it."

      --
      The truth is that all men having power ought to be mistrusted. James Madison
    3. Re:why people should read history. by Anonymous Coward · · Score: 0

      Great post, but you just completely forgot to include some words and finish your thoughts.

  18. Re:already in progress. iPads are the new laptops. by Anonymous Coward · · Score: 0

    I don't disagree with anything you say.

    However, as an Information Security professional my frustration is that security controls, large-scale management, and enterprise-level features are a complete afterthought in modern mobile devices, if even a consideration at all. The same could be said of the Windows world "back in the day." The problem is that with the advent of mobile devices in the workplace and the enterprise, we're now going back to the "back in the day" time period. There was no standing on the shoulders of giants with regard to security in mobile devices. There was no learning from our past mistakes. We're repeating history, just with smaller, shinier, more user-friendly devices. We've gone backwards. This is not a Good Thing (TM), especially with the perceived increase in security breaches due to Anon, Lulz, and Cracker Group X of the the future. (I say "perceived" because IMHO, we haven't yet had a major spike in breaches, just better press coverage, but I digress...)

    I do think that a number of folk in the IT crowd are decrying mobile computing just because it's new and, "like OMG, I'm gonna hafta learn somethin' new!" But there are valid security concerns with the current mobile device landscape. I have no doubt that the device manufacturers and vendors will eventually start paying attention again to security, but it'll take a lot of needless blood spilled to get there.

    And that's my frustration. History. Learn it. Or be doomed to repeat it.

  19. Consumer devices are not ready for enterprise... by Alyred · · Score: 1

    Consumer devices lack a lot of the safety features that are required in most corporate environments. For instance, the iDevices world make it difficult to make sure that the user locks their machines, and since they won't want to have to enter passwords/etc to get to their mail or important documents, it leaves the door wide open to anyone who swipes the device to retrieve the data. All because the user was too lazy to set a lock password.

    One of our employees rushed us to finish the configuration of a brand-new iPad for them to take on a trip... and promptly left it in the seat pocket of the plane. Didn't have ownership of it for more than 6 hours.

    It's gotten better recently with iDevices, and Blackberry has always been a bit better, but we're getting tickets such as "My manager just got a brand new droid and wants it hooked up to the mail system." They're not understanding the steps that are put in place to protect them, seeing them only as inconveniences. They'll disable them if they can half the time. We deal with a lot of confidential information and it's difficult from a security standpoint to let them out into the wild.

  20. Re:already in progress. iPads are the new laptops. by Anonymous Coward · · Score: 0

    All of this has happened before and all of this will happen again.

    -BSG

  21. InfoWorld by Plombo · · Score: 1

    Why do the Slashdot editors keep posting InfoWorld links? The submitter's name is even linked to the InfoWorld homepage, so they're just giving free traffic away to the site.

  22. What's wrong with IT? by DeathSquid · · Score: 1, Insightful

    The parent post demonstrates many of the problems with modern IT departments.

    Firstly, note the unnecessary and repetitive use of derogatory terms for customers and general profanity. Hardly professional.

    Second, complaints that the users are undermining IT perfect systems by buying devices or installing software. Basic economics tells us that users are investing money and time in these thing because they deliver value. Value that It is not delivering to a demand from their user base.

    Thirdly, complaints about having to troubleshoot problems. Isn't that what the business pays you for? In the case of a downed DSL service, a competent network engineer could diagnose that in minutes. I'm sorry it took you three weeks, but transferring your aggression to others is not productive.

    Fourthly, assuming that when users ask for something new that they must be dumb. Why should my phone and PC use the same email password? Basic key separation suggests distinct keys are superior. Note also, that a phone is not a PC. It may be difficult or impossible to respond to a mandated password change from a phone using systems that assume a PC interface, so usability is served by having different mechanisms and perhaps different password change policies. Now, I understand that the software you are currently using may not be sophisticated enough to meet evolving user demands. But that is not a user issue.

    Fifth, the wireless access point anecdote highlights appalling sysadmin practices. One point of access into the network and the bad guy was able to destroy critical infrastructure. Way to put all your eggs in one basket. The sysadmin of that network was incompetent, negligent, or both. Yes, the user did something stupid. But the real fool was the the person who did not design for defense in depth.

    It seems that many IT departments see themselves as a law unto themselves, dictating to users what they can and can't do. We've seen this cycle before. It was last at its peak during the mainframe/mini era, and those IT cathedrals were obsoleted by the PC. My advice? Pay attention to your customers and give them what they want. That way, you'll always have great job prospects.

    1. Re:What's wrong with IT? by said213 · · Score: 0

      Sixth you're never going to get invited to "those" sorts of partys... But since you clearly know everything, I trust that you're not exaxtly checking the mail for invites more than once per, predictably long, day.

      --
      help me fix this "Terrible" karma, please!
    2. Re:What's wrong with IT? by Anonymous Coward · · Score: 1

      Firstly, note the unnecessary and repetitive use of derogatory terms for customers and general profanity. Hardly professional.

      Name a profession where "customers" hold a dual position of know-nothing and know-it-all, and you'll name a profession where the true masters have derisive stories to tell behind "customers'" backs.

      BTW, your use of "customers" where "coworkers" actually applies speaks volumes about where you come from. IT isn't some tack-on part of the company like it was when personal computers were new. It's integral to the way every company is run. Without computers/networks/Internet a company is non-competitive. The only ones who can make do without make niche products or have unique locations which make competition unlikely. IT isn't some store where you buy your cyber-goods, it's a group of coworkers who you should involve in the planning of any major company undertaking. From the start.

      Second, complaints that the users are undermining IT perfect systems by buying devices or installing software. Basic economics tells us that users are investing money and time in these thing because they deliver value.

      In a perfect world. In the real world, basic human nature tells us that users attempt to install trojan codecs to watch the monkey throw its poop at a squirrel, or BlackjackDeal5.0 or myriad other things that have no value for the business. Same thing with devices. Sometimes they're restricted for very good reasons that lusers like you can't begin to comprehend with your tiny little penises.

    3. Re:What's wrong with IT? by arth1 · · Score: 1

      Second, complaints that the users are undermining IT perfect systems by buying devices or installing software. Basic economics tells us that users are investing money and time in these thing because they deliver value. Value that It is not delivering to a demand from their user base.

      Value to whom? Value to the user doesn't imply value to the company. It can very well mean negative value to the company, when the user is unable to run software or access server functions that the company requires, the user needs support for a device that IT has no idea how to support, or the company loses data because the device isn't backed up, or when HR is unable to figure out just who downloaded child porn during work hours, only that it wasn't on company equipment.

      Or, and this is a real example from a former job, due to badly configured home routers having obnoxiously long lease times combined with devices that don't renew when waking from sleep, you get IP address conflicts and prevent others from doing their job.

      This is the value you talk about?

    4. Re:What's wrong with IT? by causality · · Score: 5, Insightful

      Firstly, note the unnecessary and repetitive use of derogatory terms for customers and general profanity. Hardly professional.

      Right or wrong, I can tell you from where that originates.

      Most people would never fault a paraplegic, who is in a wheelchair, for being unable to do jumping jacks. He would probably love to do them. He really cannot. It is "cannot", not "will not". Likewise, most people would not fault a diagnosed mentally retarded person for being unable to understand simple things. Chances are, no one has a harder time not hating that than he. There is no point and no profit in blaming either of those, and doing so would indicate extreme heartlessness and lack of understanding.

      The problem is, there are large masses of people who have no disabilities of any kind. They are capable of abstract thought, of following simple instructions, of performing at least a minimal search for something and only asking for help if that doesn't find what they are looking for. They can do all of these things. Yet, a great many of them refuse to think. They don't want to use whatever thinking they can perform. By that I don't mean anything extreme or over-the-top or unreasonable. By that I mean an unnaturally high degree of helplessness, a freakishly strong desire for handholding even when this would take much more time than a two-minute Google search they are more than capable of performing.

      Thinking is for "the help". That's grunt work for the computer janitors to do for them. It would not even occur to them to try. Thus, for most tech support lines, the one person who truly has a real problem that really does require the attention of a technician gets to wait on hold for 10-45 minutes because the lines are tied up by people who failed to read page 1 of the manual, the help file, the README file, the FAQ, the Web site, and the last e-mail they received.

      This is the mentality with which you are dealing. You can gloss over it and cover it up with your grand notions of service, but you're patting yourself on the back to forget how much youre tempted to apply a cat-o-nine-tails to theirs. In a way, it truly is a trophy to be able to deal with that without getting a severe headache. After a while you can start to believe that you're just that eager to serve. I consider it a coping mechanism. The truth is, that mentality invites failure, asks for failure, begs for preventable problems, and tries very hard to defeat itself with problems of its own creation. It just so happens that they hired you to stand between themselves and any such consequences.

      So you end up having to defend a network from both outside threats and the self-defeating, shortsighted actions of insiders who meant well. This isn't a fun position in which to find oneself. Oh, and if you lock it down too much, you will be swamped with complaints about functionality. It's like trying to simultaneously satisfy multiple contradictory conditions.

      Most of those conditions wouldn't be contradictory if only users would attain the slightest clue pertaining to the tools they use every day. I am not talking about the knowledge of a skilled mechanic. I am talking about knowing how to drive. Lots of highway accidents didn't require an auto mechanic to prevent; they required a driver who understood how to drive. IT is like this. I do not refer to the skill needed to smelt iron ore, forge pig iron, and craft a hammer. I refer to the fact that a carpenter knows how to use his tools, even though they are not the goal of his job. So it is with workers who use computers but should not need to become experts. They only need to know basics. They refuse to learn them in a way that a driver could never refuse to learn to drive and expect to get away with.

      Just as there's no point in being well-adjusted to a sick society, there's no point in seeing all of this and telling yourself that it is normal and should not change. The crux of the matter is whether you can know how fucked up it is and still deal with it patiently, educating those who will be educated and assisting the rest as much as you can. Making excuses for it and debasing yourself is just weak.

      --
      It is a miracle that curiosity survives formal education. - Einstein
    5. Re:What's wrong with IT? by Moryath · · Score: 2

      ... No.

      Firstly, note the unnecessary and repetitive use of derogatory terms for customers and general profanity. Hardly professional.

      If you think auto mechanics don't tell stories about the twit stepford wife who drives a $100,000 sports car for a year and a half without having the oil changed?

      If you think that electricians don't tell stories about the moron who tries to splice cable themselves and gets a good jolt or goes to the hospital for their trouble?

      I could go on, but every profession has a word (or several) for the kind of idiot who goes around, say, Practicing IT Without A License.

      Second, complaints that the users are undermining IT perfect systems by buying devices or installing software. Basic economics tells us that users are investing money and time in these thing because they deliver value. Value that It is not delivering to a demand from their user base.

      No, complaints that users are bringing outside devices into the network that don't meet security requirements, that were not purchased by the company, that have not been approved to be brought in by the company.

      If there is value in the devices, the appropriate thing to do is to work WITH the IT department prior to purchase to see what can be done for integrating them - so that IT can do the research and be prepared to support it, not buy them first and then demand that IT "just make it work" as a surprise.

      Thirdly, complaints about having to troubleshoot problems. Isn't that what the business pays you for?

      Business pays you to troubleshoot the business systems and keep them secure.

      In the case of a downed DSL service, a competent network engineer could diagnose that in minutes. I'm sorry it took you three weeks, but transferring your aggression to others is not productive.

      When IT is testing the device onsite and it works, and the user's home connection is the problem but the user won't do their part and contact the provider?

      Fourthly, assuming that when users ask for something new that they must be dumb. Why should my phone and PC use the same email password?

      I'm willing to bet GP is set up on an Active Directory system, where the computers and the Exchange environment both authenticate to the same domain.

      Fifth, the wireless access point anecdote highlights appalling sysadmin practices. One point of access into the network and the bad guy was able to destroy critical infrastructure. Way to put all your eggs in one basket. The sysadmin of that network was incompetent, negligent, or both. Yes, the user did something stupid. But the real fool was the the person who did not design for defense in depth.

      I'm not sure what you claim you'd do here. The "Clueless User" was someone high up in the business ecosystem. They were given a point of access for their machine to connect to. They, not following the business's own procedures, plugged a contraband item into the jack intended for their machine.

      Short of locking down the network to a list of MAC addresses - which would require getting the MAC address of every single device in the company's possession - what would you do?

      It seems that many IT departments see themselves as a law unto themselves, dictating to users what they can and can't do. We've seen this cycle before. It was last at its peak during the mainframe/mini era, and those IT cathedrals were obsoleted by the PC. My advice? Pay attention to your customers and give them what they want. That way, you'll always have great job prospects.

      No, it seems that IT is once again caught between the contradictory, schizophrenic "Number One Priorities List" that people like you come up with where IT should be doing everything for you, should make the entire network completely open with every user able to install whatever piece of crap they picked up from Best Buy this weekend or any little widget from the internet and all the accompanying crapware that tagged along with it, but at the same time maintain a "secure" network that runs well.

      Well?

    6. Re:What's wrong with IT? by spire3661 · · Score: 1

      Most good I.T. departments consider their coworkers their customers. Its honestly a sign of respect. The real world of that is there needs to be some separation of I.T. and other departments, jsut like H.R. is usually insular too. Its a sensitive area of the company involving lots of privacy and control for often very good reasons. We address our coworkers as customers to reflect this distinction. Familiarity breeds contempt.

      --
      Good-bye
    7. Re:What's wrong with IT? by Moryath · · Score: 4, Insightful

      Wish I had modpoints to mod this up.

      This is precisely the problem. In an ideal world, users would stick within usage policies and requirements. When there was a policy for equipment requests, for support of personal devices, they'd follow it.

      That's fantasyland. In the real world, IT is stuck between a rock and a hard place. Between "supporting the users" and defending the network from the users. Damned if they do, damned if they don't, and taken through the wringer the moment some bad-apple employee makes off with company property or leaks trade secrets that have been copied to a USB memory stick. Or lets loose something on the network because they just can't resist clicking on "OMG FREE PUPPY SCREENSAVER."

      The problem is that IT has to deal with five categories of user. They're easy to categorize.

      1. Knows nothing. KNOWS they know nothing. Ask questions often, but ask questions before they cause trouble. Not a major source of trouble, just use up a certain amount of time.
      2. Technically savvy, follows procedures. When these guys call, it's going to be a doozy, but they've got a ton of troubleshooting steps ready and a list of things they have done for you to look at. When they come in with a new gadget, they're willing to give IT the time to research how best to support it.
      These two categories are not the problem, because they approach IT as coworkers to work with.
      3. Knows just enough to cause trouble. Believes themselves technically savvy. Will lie out their asses rather than admit to flailing around and making the problem worse.
      4. Knows nothing, but wants the Latest Shiny Thing and wants it to Just Work Like It Does In The Commercials.
      These are the problem. These types of users are the ones who get into large amounts of trouble and take up the majority of troubleshooting time, mostly because they are not treating IT as co-workers to be collaborated with, but someone to be bossed around. These are the sort of user who treats passwords as a hindrance, rather than keys to important locks. They wouldn't leave the combination to the company safe in the open, but they think nothing of leaving their username and password on a sticky-note under the keyboard.

      The final type of user, the one every IT person dreads and prays never to encounter but has to protect against anyways, is the user who is actively trying to sabotage the network or do something outright illegal on it. And yes, sometimes protecting against these users inconveniences the other users.

      Name a profession where "customers" hold a dual position of know-nothing and know-it-all, and you'll name a profession where the true masters have derisive stories to tell behind "customers'" backs.

      One of the arguments is about a person who is berating her IT department for the fact that her laptop won't work at home. Apparently, they told her repeatedly to call her ISP, and she refused to do so. The very picture of the uncooperative user who refuses to work with IT to solve the problem.

      And yet, Mr. DeathSquid accuses the GPP of being incompetent, saying "a competent network engineer could diagnose that in minutes". Well, I reread GPP's post, and it appears that they did in fact have it correctly diagnosed, but that the problem was an intractable, uncooperative user who simply shouted "you fix it" at the IT department rather than holding up her end of the bargain to call her home ISP.

      I'm willing to bet that this is the kind of stuff Mr. DeathSquid does to people in IT all the time. When you're dealing with coworkers, you have to be willing to look at things from their perspective. When IT says the problem appears to be with your home connection, and that you're the one who will need to call your ISP to have it checked, the proper response is to call your ISP, not shout at IT and yell at them for "not fixing it."

    8. Re:What's wrong with IT? by spire3661 · · Score: 1

      And thus the cathedral mentality is exposed. have you so little faith in your network that you cant defend yourself from the users? A network is more then a collection of business systems. Its an ecosystem of users, functionality, security, admins, decision makers. Its not a cathedral but a living design that needs to change to reflect the changes in technology. No one is saying let any old cheap chinese crap android tablet on your network, but my question would be, where is your alternative you can point to when users demand more functionality? Where is your answer to their cries? Or are you waiting on Microsoft to swing into action.......

      --
      Good-bye
    9. Re:What's wrong with IT? by DeathSquid · · Score: 0

      Sometimes they're restricted for very good reasons that lusers like you can't begin to comprehend with your tiny little penises.

      Who told you about my penises?

      That you for once again demonstrating the propensity for some IT people to resort to name calling and profanity rather than reasoned discourse. You complain that IT should be involved by co-workers "from the start". Perhaps you should to reflect on how your behaviour might be anathema to your goals?

    10. Re:What's wrong with IT? by DeathSquid · · Score: 0

      One of the arguments is about a person who is berating her IT department for the fact that her laptop won't work at home. Apparently, they told her repeatedly to call her ISP, and she refused to do so. The very picture of the uncooperative user who refuses to work with IT to solve the problem.

      And yet, Mr. DeathSquid accuses the GPP of being incompetent, saying "a competent network engineer could diagnose that in minutes". Well, I reread GPP's post, and it appears that they did in fact have it correctly diagnosed, but that the problem was an intractable, uncooperative user who simply shouted "you fix it" at the IT department rather than holding up her end of the bargain to call her home ISP.

      I'm willing to bet that this is the kind of stuff Mr. DeathSquid does to people in IT all the time. When you're dealing with coworkers, you have to be willing to look at things from their perspective. When IT says the problem appears to be with your home connection, and that you're the one who will need to call your ISP to have it checked, the proper response is to call your ISP, not shout at IT and yell at them for "not fixing it."

      It's not clear to me from the posting if it took three weeks to diagnose or not. If it indeed took three weeks, I stand by my claim of incompetence. If not, then the problem didn't take three weeks to resolve. It was resolved as soon as it was shown to have nothing to do with the company infrastructure.

      Now, users can be assholes. I've seen my share. The correct response is to use internal grievance processes, or (as a last resort) statutory law against workplace bullying. The incorrect response is to run around doing your own name calling. If you act professionally, people will treat you that way.

    11. Re:What's wrong with IT? by Moryath · · Score: 1

      have you so little faith in your network that you cant defend yourself from the users?

      No, but often defending the network from the users means that certain things have to be handled in a way that you wouldn't do in someone's home network environment.

      Believe it or not, IT security concerns for a University, Hospital, or large-scale (or even smaller-scale) business, from a law firm to department store chain, make it so that they are a completely different environment from the knocked-together, wide open "home network" involving someone bringing a $25 router home from Best Buy, plugging it into a DSL modem, plugging their home PC in and setting their laptop to talk to a wide-open wireless network that has named itself "Netgear", and never bothering to configure the security setup or even make sure that their laptop's administrator password isn't blank.

      There are a whole mess of things you have to do. And you have to do them because there are severe legal consequences if something is exposed, on a federal-law level. It doesn't matter if anyone actually accesses something or not, the mere fact that it was exposed is enough to trigger potential legal hell.

      No one is saying let any old cheap chinese crap android tablet on your network,

      Actually, that seems to be exactly what they are saying.

      but my question would be, where is your alternative you can point to when users demand more functionality?

      It may be that the device does not exist yet. Remember, there was an amazing amount of furor involved in allowing Barack Obama to use a Blackberry while in the Office of the Presidency, including getting a custom model that didn't have a GPS chip. And he's got a hell of a lot of pull to get something like that done. You think that Blackberries are allowed for certain other people with high, high security clearances? Think again.

      On a lower level, there's a large amount of things that an iPad (for instance) doesn't handle well. Security on it is basically a joke; a lost iPad's security code (you know, those nifty little 4-digit PINs or finger-swipe patterns?) can be broken trivially in a day or so. Once you're in, you are in User Mode and Jailbreak is only a website visit away. A Jailbroken iPad may be "more functional", but it's been rooted in such a way that the security on it is now compromised. The fact that the holder of the iPad is, at any time, able to assume SuperUser status fairly simply with the Jailbreak hacks makes it very difficult to clear the devices for use in a network where security is deemed to be of high concern.

      Where is your answer to their cries?

      Being a bit hyperbolic, are we? As I just said, sometimes the answer is, "there doesn't currently exist a device that can meet the legal and policy requirements of the network and still give the functionality you are looking for."

      Or are you thinking that every IT department has a budget of millions of dollars to design and build one from scratch? Chances are they are operating on a shoestring, trying to keep everything running nominally well while waiting for the "other shoe" from a clueless PHB in management to drop on their upcoming budget.

    12. Re:What's wrong with IT? by Moryath · · Score: 2

      I will quote from the GPPPPP:

      "but she wouldn't admit the possibility or even call AT&T until we made her try it when she was visiting her brother in another state and her laptop worked fine in his house (with his open wireless connection). Instead, we were treated to 3 weeks of "why can't you fucking people make my laptop work at home" from her."

      It sure as hell looks to me like they knew for a hell of a long time that her DSL was down, but she was refusing to call them. In other words... the user was being a bitch.

      Now, as for "The incorrect response is to run around doing your own name calling. If you act professionally, people will treat you that way."... may I suggest that maybe, just perhaps, letting off steam in an anonymous forum while not using the user's name or company details, is probably far different from acting unprofessionally to the user? Even when the user was demonstrably, herself, acting completely unprofessional?

    13. Re:What's wrong with IT? by spire3661 · · Score: 1

      "Believe it or not, IT security concerns for a University, Hospital, or large-scale (or even smaller-scale) business, from a law firm to department store chain, make it so that they are a completely different environment from the knocked-together, wide open "home network" involving someone bringing a $25 router home from Best Buy, plugging it into a DSL modem, plugging their home PC in and setting their laptop to talk to a wide-open wireless network that has named itself "Netgear", and never bothering to configure the security setup or even make sure that their laptop's administrator password isn't blank."

      Professional networks are professional, thank you for that wonderful insight.

      --
      Good-bye
    14. Re:What's wrong with IT? by NoAkai · · Score: 1

      Oh how I wish users could be labelled "coworkers". But no, not only is my part of the I.T department outsourced (I work on-site, interestingly enough, the helpdesk is in-house), but the workplace (bank) is set up in a way so that the IT-department (even the in-house guys) technically is a separate corporation from the "main" bank. So our users are most definitely customers, and the customer is always right. This means that when a user screams and calls us "fucking idiots" because his 3G-module is delayed, we have to cower and lick his boots, rather than tell him that his module is delayed because half of the manufacturer's workforce died in the earthquake in Japan... I have no problem with common courtesy, but if "serviceminded" means to pamper these ~50 somethings like spoilt children, I'd rather not be.

    15. Re:What's wrong with IT? by the_B0fh · · Score: 1

      Firstly, you are a superior dick.

      Secondly, there are laws that would put me in jail if I was negligent in protecting corporate data.

      Thirdly, I'm not paid to troubleshoot your screwed up home network.

      Fourthly, you have no fucking clue what you are talking about. Yes, basic key separation is superior, but you do not protect a high security key with 4 digits, especially when research shows that 80% of the time, you can get in within 10 tries. Your phone is not a PC, but it is storing data that needs to be secured like a PC. So suck it up.

      Fifth (not fifthly? where's your superior consistency?) you are still a moron. Once someone gets into your network, they can always find some other server and jump off that into your internal network.

      I do not give my customers what they want, because it would go against audit and established policies that come down from senior management. I give them what they need. For example, you, Mr. Superior Dick, needs a kick in the ass.

    16. Re:What's wrong with IT? by Ice+Tiger · · Score: 1

      You complain that IT should be involved by co-workers "from the start". Perhaps you should to reflect on how your behaviour might be anathema to your goals?

      This line is 100% spot on, if you want to be involved from the start them make your coworkers problems your own and help them solve the business problem. Build that relationship and you'll find you'll be invited to things from the start.

      --
      "Because we are not employing at entry level, offshoring will kill our industry stone dead."
    17. Re:What's wrong with IT? by drinkypoo · · Score: 1

      I'm sure someone will post the obligatory XKCD... but it truly is amazing how many of the user's problems the technician solves by reading the documentation. Of course, the user has convinced themselves that this stuff is impenetrable, and so the words are just so much line noise to them. Oh and by the way, they have no idea what a line is, or what noise is. Best to just enjoy job security because the world is complicated, people specialize because you can't learn everything, and at the end of the day, not all of us can be geeks. Whether that's a good or bad thing, we could debate until 1 became 0.

      --
      "You're right," Fisheye says. "I should have set it on 'whip' or 'chop.'"
    18. Re:What's wrong with IT? by drinkypoo · · Score: 1

      Believe it or not, IT security concerns for a University, Hospital, or large-scale (or even smaller-scale) business, from a law firm to department store chain, make it so that they are a completely different environment from the knocked-together, wide open "home network" involving someone bringing a $25 router home from Best Buy, plugging it into a DSL modem, plugging their home PC in and setting their laptop to talk to a wide-open wireless network that has named itself "Netgear", and never bothering to configure the security setup or even make sure that their laptop's administrator password isn't blank.

      Did you find that straw man a satisfying opponent? GP said that your infrastructure should be able to handle attacks from within, and GP is right. You argue that you have to take this stuff more seriously than the average user, but then you tell us that you're incapable of doing so. What happens when some jerkoff who's not even supposed to be there tries to get on your network? If you're prepared for that, you'll be prepared for doctors trying to use poorly-secured IOS devices.

      --
      "You're right," Fisheye says. "I should have set it on 'whip' or 'chop.'"
    19. Re:What's wrong with IT? by Moryath · · Score: 1

      If you're prepared for that, you'll be prepared for doctors trying to use poorly-secured IOS devices.

      Sigh.

      The proper response to the poorly-secured devices is to not let them onto the network. The entire argument going on here is that people who don't understand what they are doing want to simultaneously have a "secure network" while letting any random device that someone may bring from home onto it.

      Now, can you set up a "walled garden" for guest-level devices to play in? Sure. But I can guarantee you, a "walled garden" won't touch the stuff that Mr. Gotta Have New Shiny Toy wants it to touch.

    20. Re:What's wrong with IT? by DeathSquid · · Score: 1

      Firstly, you are a superior dick.

      Secondly, there are laws that would put me in jail if I was negligent in protecting corporate data.

      Thirdly, I'm not paid to troubleshoot your screwed up home network.

      Fourthly, you have no fucking clue what you are talking about. Yes, basic key separation is superior, but you do not protect a high security key with 4 digits, especially when research shows that 80% of the time, you can get in within 10 tries. Your phone is not a PC, but it is storing data that needs to be secured like a PC. So suck it up.

      Fifth (not fifthly? where's your superior consistency?) you are still a moron. Once someone gets into your network, they can always find some other server and jump off that into your internal network.

      I do not give my customers what they want, because it would go against audit and established policies that come down from senior management. I give them what they need. For example, you, Mr. Superior Dick, needs a kick in the ass.

      Oh dear. We *are* a little upset aren't we?

      Let's run through you list, shall we? 1. I am aware of no law that prevents a sysdamin from being professional and customer focused. You are creating straw men arguments to excuse poor performance and behaviour. 2. I wouldn't let somone with your demonstrated emotional instability anywhere near my home network. And it's working fine thanks (wired and wireless, IPv4 and IPv6, public servers and secured compartments), so I have no need of your dubious services. 3. If you believe that mobile devices are less secure than PCs (which may indeed be true, although the devil is in the detail) then that is an even stronger argument for key separation. You didn't really think that through, did you? 3. Indeed you are correct about "fifthly" being more consistent. I stand corrected. However your claim that once someone "gets into" your network they can always "jump off that into your internal network" exhibits a remarkable lack of technical terminology, skill or knowledge of the art. Your security thinking is hopelessly mired in the 1990's. Defense in depth is not particularly controversial, and modern networks have quite fuzzy boundaries indeed. 4. While I am not in a position to know what your customers want or need, I suspect you have displayed to the world that neither do you. But you sure can use the same few cuss words over and over. Does shouting help too?

      Stepping back a little, your post is probably mostly hyperbole. I imagine you have a difficult job working with difficult customers, who on occasion make things much harder and less pleasant that they could be. Guess what? Most people face this most days. Your profession does not have a monopoly. Try to relax, ease up on the profanity, deal with your control issues, and engage your customers more constructively. You may find it improves things.

      Finally, I'd like to thank you for recognizing my dick as superior.

    21. Re:What's wrong with IT? by Compaqt · · Score: 1

      >No one is saying let any old cheap chinese crap android tablet on your network,

      Lol! I think he means that expensive iStuff from the same Chinese factory as the cheap stuff should be allowed.

      Anyway, what is the security difference supposed to be between the cheap and expen$ive stuff?

      --
      I'm not a lawyer, but I play one on the Internet. Blog
    22. Re:What's wrong with IT? by justsayin · · Score: 1

      Totally agree. The AC posting above with all the expletives has taken a turn down the dark side of IT. Almost went there myself a few years back. Thankfully a good friend showed me the error in my ways. Yesterday I worked on an Iphone and today I am setting up a new 3 thousand dollar MAC. I do this in addition to my normal server, firewall, PC related duties and also help with Itunes, Androids, Ipods, Ipads,... Pretty much anything at all. I love the new stuff the users bring in. It is fun to figure out how to secure it and how to make it work with our systems. Change is fundamental in IT. Accept it or go down fighting.

    23. Re:What's wrong with IT? by causality · · Score: 1

      I'm sure someone will post the obligatory XKCD... but it truly is amazing how many of the user's problems the technician solves by reading the documentation. Of course, the user has convinced themselves that this stuff is impenetrable, and so the words are just so much line noise to them. Oh and by the way, they have no idea what a line is, or what noise is. Best to just enjoy job security because the world is complicated, people specialize because you can't learn everything, and at the end of the day, not all of us can be geeks. Whether that's a good or bad thing, we could debate until 1 became 0.

      The commentary was more about the way human beings choose to deal with the world, their refusal to invest anything in it, the fact they are still so willing to complain, etc. Job security wasn't what I was addressing.

      The difference between a technician and a babysitter is more like what I was writing about. Many, many "babies" are well into middle age...

      --
      It is a miracle that curiosity survives formal education. - Einstein
    24. Re:What's wrong with IT? by spire3661 · · Score: 1

      If you're prepared for that, you'll be prepared for doctors trying to use poorly-secured IOS devices.

      Sigh.

      The proper response to the poorly-secured devices is to not let them onto the network. The entire argument going on here is that people who don't understand what they are doing want to simultaneously have a "secure network" while letting any random device that someone may bring from home onto it.

      Now, can you set up a "walled garden" for guest-level devices to play in? Sure. But I can guarantee you, a "walled garden" won't touch the stuff that Mr. Gotta Have New Shiny Toy wants it to touch.

      And we are telling you that saying no to everything IS NO LONGER VIABLE. The barbarians are at the gate, my friend. Will you be Denethor or Theoden? While you stand in your fortress or will you ride out to the Rohirrim?. It is fools like you i enjoy steamrolling in I.T. meetings. Your entrenched position is no longer safe. We are coming for YOU.

      --
      Good-bye
    25. Re:What's wrong with IT? by deets52 · · Score: 1
      WOW, let me guess... you never worked in IT (or any service position before). I would have to guess you're more on the sales side of things by your post (hint: point #2 gave it away).
      I was going to reply to each of your points but after reading your 2nd point I realized it was not worth it as you would never be able to understand the logic behind corporate governance or IT security policies.
      I will, however, leave you with the following since this would be as good a place as ever to try to get you started in the right direction.

      It seems that many IT departments see themselves as a law unto themselves, dictating to users what they can and can't do.

      No, it's the IT departments job to execute the policies dictated by the executive managment. This is done to better secure the environment.

      Pay attention to your customers and give them what they want.

      Wrong again (unless you're in sales like you). Give them what they NEED to do their job.

      You see things like many IT customers. "You're here to serve me". That is, of course, incorrect. IT is there to serve the business. Hate to tell you, but it really is about more than just you most of the time.

    26. Re:What's wrong with IT? by Moryath · · Score: 2

      Oh please.

      You are the exact sort of fuckwit Denethor was. He ruined his country by insisting on using an illicit Palantir behind the firewall.

      Maybe you were forgetting that little part in your haste to misquote Tolkien?

    27. Re:What's wrong with IT? by Dog-Cow · · Score: 1

      If no is no longer a viable answer, the user who insists on a different answer should be ready to be held legally responsible for every single security breach that follows. But of course the shits want their toys and none of the responsibility. They never left kindergarten.

    28. Re:What's wrong with IT? by Dog-Cow · · Score: 1

      I find it amusing how you expect IT to bend over backwards, and that you can not entertain the notion that not only is the customer not always right, but sometimes he's a dipshit who is a poster boy for the idea that stupidity should be painful.

      It is not legal, ethical nor moral to give IT a set of legal mandates and then expect them to bend over backwards to ignore those mandates when it suits you.

    29. Re:What's wrong with IT? by Dog-Cow · · Score: 1

      Not everyone gets to work for Apple.

    30. Re:What's wrong with IT? by spire3661 · · Score: 1

      A fair point. Regardless of how he got there, when the full realization of the Dark Army hit him, he crumbled, unable to be bolstered, going so far as to break his troops morale. When despair took Theoden, Aragorn was able to remind him of who and WHAT he was and they charged headlong in to glory. MIDs are here and user demands are going to be hard to ignore. You can despair about it or you can design a hardened network and robust data policies to serve your users. Taking a hard stance and being completely inflexible on this matter are going to become harder for I.T.

      I am here to be Aragorn, to remind you that we are problem solvers at heart. Allowance HAS to be made for MID use, it cannot be ignored. Your concern should be 'how do i connect with my users securely using insecure devices. What tools do I have in my toolbox to accomplish this.' Its fine to say no, but only if you have alternatives you can point to.

      --
      Good-bye
    31. Re:What's wrong with IT? by Anonymous Coward · · Score: 0

      MIDs are here and user demands are going to be hard to ignore. You can despair about it or you can design a hardened network and robust data policies to serve your users.

      They're not being ignored. But they, just as much as IT, are bound by the legal strictures and executive policy decisions that the business has to follow. Is that so fucking hard to grasp? Or was the poster above correct, you are one of those sorts who wants everything fucking open and doesn't give two shits about security.

      "We are coming for YOU"... LMAO. Here's a hint: "We", the sysadmins of the world, are not paid to be your fucking nanny. We are paid and given the mandate from the top, from your boss's boss's boss's boss, to KEEP THINGS SECURE SO THAT COMPANY IP AND TRADE SECRETS ARE NOT PUT OUT BARE ON THE INTERNET AND STOLEN BY EVERY COMPETITOR AND TWO-BIT CHINESE THIEF COMPANY ON THE PLANET.

      Was that so fucking hard to understand, you goddamn fucking moron?

      Taking a hard stance and being completely inflexible on this matter are going to become harder for I.T.

      When "inflexible" is used as you do, a codeword for "do what we want, fuck security", you get instances like Sony. Or when the iPhone prototype was stolen. Get the fucking hint already you goddamn loser?

      Allowance HAS to be made for MID use, it cannot be ignored. Your concern should be 'how do i connect with my users securely using insecure devices.

      Insecure devices, by their nature, DO NOT CONNECT SECURELY. That right there is problem number one. I have no problem giving them a walled garden - similar to what any smart business does when they set up separate, sandboxed "Guest" wireless access alongside the internal, much-more-functional corporate wireless network. I have no problem with them accessing those things that can be accessed securely, such as an Exchange email website using secure encryption that disallows downloads of file attachments, from them.

      But by the same token, to even take the risk of someone "accidentally" or otherwise putting trade secrets out on "the cloud"? You're out of your goddamn mind. Let's take a good example - DROPBOX.

      Dropbox's "security" is fucking trivial to break. It has no granularity: you give a list of people access to your stuff, and they all have access, period. You can't say "only person X has access to file Y" from within Dropbox. And you can't enforce that the person on the other end of it is keeping a secure password, even if you have a perfectly trained user who would never, ever, ever use an easily broken password.

      My proposed solution would be VPN access followed by a samba share (or if you want, a Mac file share, or a Linux file share, or a Sharepoint arrangement... whatever floats your boat). But they can't get to it until they have authenticated to the VPN. Know what you'll get from users? "But that's too hard, I want it to just work like it does in the commercials where I never have to enter anything."

      The problem is not MIDs. The first problem is GODDAMN FUCKING LAZY AS HELL USERS LIKE YOU who won't follow policies for security or best practices even when you make them "data owners" and tell them the responsibility to safeguard data is on their heads, and the second problem is the Fucking Stupid PHB's who will come screaming at IT when one of the aforementioned "data owners" then screws up royally. I've watched it happen.

      IT doesn't cause companies to fail. Fucking Stupid PHBs and Lazy As Fuck Users who don't give a shit about security cause companies to fail when their IP gets stolen.

    32. Re:What's wrong with IT? by Moryath · · Score: 1

      Where did I say I was "saying no to everything" anyways? You love putting words into people's mouths. A friend of mine works at a company where the CEO and lawyer crowd ordered him to block access to outside web-based email (gmail, yahoo, hotmail, etc) following someone letting a worm loose inside the network (initial infection because the moron clicked on a phishing link). You sound a lot like their complainers who didn't want to admit that accessing certain things from the outside caused security holes on the inside, much like Denethor and the Palantir.

      Did he want to do it? No. Did he have to do it? Of course. Was there a significant portion of the userbase who decided to blame "draconian evil IT who never wants us to have anything" for it, rather than the CEO and lawyers who came up with the order, or the user who touched it off in the first place? Of course. I bet you're a lot like them, not thinking about how things look from the other end.

      But I digress...

      I was saying that there are certain things an insecure device shouldn't touch. There are certain bits of data that should NEVER be allowed out unencrypted. Where I work, we're going through a major overhaul trying to get certain people to synchronize paper and electronic-data retention and secure deletion (aka "shredding") requirements. We're spending a lot of time trying to train them. We're spending a lot of time going over the proper tools to do the job. We're ensuring that every station built or rebuilt from now on has these tools present, and we're rolling the tools out to existing stations as fast as possible.

      Some days it makes me want to pull my hair out. The CEO's mandated that everyone follow these policies as drafted by Legal. These users are certainly capable of learning, but they spend more time stonewalling and talking about how they "shouldn't have to be the ones doing this" and "don't get this stuff", and "don't want to deal with it" even though they are the Data Owners according to policy, and it's their responsibility.

      Does this mean that the corporate business plan, confidential draft contracts, and sensitive intellectual property should be allowed to be on a smartphone or iPad? If you think so, you're nuts. These devices are insecure by their very nature. There is not, without jailbreaking it (which is a mess in itself), a method of encryption that works well similar to Truecrypt or other encrypted-volume solutions that are available on Linux, Mac, or PC laptops. Maybe that will change in the future, but for right now, that is a major concern. Yes, we've explored possible products as a solution, but so far they turned out to be far too easily broken.

      Sometimes, the correct answer is "We need you to look at this alternative instead." Sometimes, the answer is "Sure, no problem." And sometimes, the answer is and has to be, No or at least "we can't certify it at this time, talk to Legal for the why."

      Take that last answer out of the realm of possibility, and you're asking for trouble. We don't set out to stymie the users. If anything, we are caught between the dictates of Legal, Upper Management, and the users and we're trying to do the best we can to strike the balance.

    33. Re:What's wrong with IT? by DeathSquid · · Score: 1

      I find it amusing how you expect IT to bend over backwards, and that you can not entertain the notion that not only is the customer not always right, but sometimes he's a dipshit who is a poster boy for the idea that stupidity should be painful.

      It is not legal, ethical nor moral to give IT a set of legal mandates and then expect them to bend over backwards to ignore those mandates when it suits you.

      I find it amusing that you expect customers to bend over backwards, and that you can not entertain the notion that not only is IT not always right, but sometimes he's a foul mouthed post boy for the idea that recalcitrance should be unemployed. It is not rational, ethical nor moral to pass blame to crazy legal mandates passed by your own body politic and then expect the rest of the world, who have nothing to do with your self-inflicted laws, to care one whit.

      Stop whining about your own laws. If you don't like them, get them changed.

    34. Re:What's wrong with IT? by uninformedLuddite · · Score: 1

      users attempt to install trojan codecs to watch the monkey throw its poop at a squirrel

      I totally missed that what was hidden in the poop?

      --
      The new right fascists are bilingual. They speak English and Bullshit.
    35. Re:What's wrong with IT? by uninformedLuddite · · Score: 1

      Don't forget number five. The type of user who strange things happen to. Strange, wierd, and wonderful things occur on their computers. It doesn't matter what computer they are on this 'poltergeist activity'(for want of a better expression) will happen to technology they use or are somehow connected to. You have witnessed this strange behaviour but have no idea what causes it. You cannot replicate it, you cannot explain it, and you definitely cannot categorise it. Am I the only person who has seen this sort of employee/customer? I'm sure that I'm not.

      --
      The new right fascists are bilingual. They speak English and Bullshit.
    36. Re:What's wrong with IT? by uninformedLuddite · · Score: 1

      Yet, a great many of them refuse to think.

      I don't know if it's refusal. I am beginning to suspect that they really just don't know how. The ability to think and act upon those thoughts is gone in most people. Something has gone wrong. Maybe it's the schools or maybe even the flouride. My money is on TV.

      --
      The new right fascists are bilingual. They speak English and Bullshit.
    37. Re:What's wrong with IT? by the_B0fh · · Score: 1

      Stop whining about your own laws. If you don't like them, get them changed.

      Apparently you live in a world that is far removed from the reality I live in. No wonder you are such a superior dick

    38. Re:What's wrong with IT? by the_B0fh · · Score: 1

      Stepping back a little, your post is probably mostly hyperbole. I imagine you have a difficult job working with difficult customers, who on occasion make things much harder and less pleasant that they could be. Guess what? Most people face this most days. Your profession does not have a monopoly. Try to relax, ease up on the profanity, deal with your control issues, and engage your customers more constructively. You may find it improves things.

      Funnily enough, my team loves me, most of my internal customers love me, and even people who call up ranting about suing the company ended that phone call discussing fishing in Alaska with me.

      However, people who actively lie to me, or misuse things like "but you said" when I did not, do not like me, especially when I point out to them I did not say whatever it was their imagination caused them to think so. Even when they are two levels above my paygrade.

      I even went against my VP once. Pissed the fuck out of him. Nearly got fired. But then, guess what. The chief attorney came back and told me - good job. When people ask for stupid stuff, it is good that you stop them. Preventing the company from being exposed to multimillion dollar lawsuits is apparently a good thing.

      And you are still a dumb ass when it comes to security. Spouting stupid key words does not make you seem more impressive.

    39. Re:What's wrong with IT? by the_B0fh · · Score: 1

      Why not? In his world, unicorns fart rainbows too.

    40. Re:What's wrong with IT? by causality · · Score: 1

      Yet, a great many of them refuse to think.

      I don't know if it's refusal. I am beginning to suspect that they really just don't know how. The ability to think and act upon those thoughts is gone in most people. Something has gone wrong. Maybe it's the schools or maybe even the flouride. My money is on TV.

      At the same time that it's amazing what people can do when they really have to, it's also shameful that most won't until the condition of "really have to" is satisfied.

      It's mostly the schools. If not for them, people would know how to critically think and deconstruct what they see on TV, how to put it into perspective, how to recognize the various propaganda and rhetorical techniques. Though I'll add that if we didn't live in an anti-intellectual culture, if being intelligent and perceptive and wise were "cool", we'd hardly know this problem at all.

      John Taylor Gatto is the finest available resource for this subject. An entire book of his, The Underground History of American Education explains a great deal of the problem. I highly recommend reading it. It's something everyone should read, particularly parents but also anyone who really wants to understand how we ended up with the society we know today. It is the product of much social engineering, not the way people inherently are.

      I still think the problem is a little deeper. It's not that people aren't taught how to think. It's that people are passive followers who won't learn how to think until and unless someone else decides to give them that knowledge. They will not take it and claim it as their birthright whether anyone likes it or not. It is not unwise to stand between them and it. There is no self-sufficiency in most of them. They don't know how to assert control of their own education. Instead they entrust it to strangers. Just think about that. The average person wouldn't trust a $100 bill to a bunch of unaccountable strangers. Their education and the degree that it determines how their lives will be is vastly more important.

      --
      It is a miracle that curiosity survives formal education. - Einstein
  23. easy: your mom should grok it by obarthelemy · · Score: 1

    a while back I was working sales in a dev shop. My mantra was: our apps should be so easy to use that your mom should be able to use them. Not you, not me, not your GF... your mom. And I'm not talking about that ubercool geeky mom, I'm talking about the one who gets lost because an icon moved 2 inches to the left...

    I regularly got shot down for dumbing things down too much... I still sure I was right, though.

    --
    The Cloud - because you don't care if your apps and data are up in the air.
    1. Re:easy: your mom should grok it by LostAlaska · · Score: 1

      I'm sorry, and I don't mean to be a jerk, but sometimes I can't help it.. I had a programming instructor in college that used to _constantly_ say.... "If you only design your programs for the lowest common denominator (user) you end up with mediocrity."

    2. Re:easy: your mom should grok it by Anonymous Coward · · Score: 0

      See here's the problem, these apps are NO DIFFERENT than any other machine or device that your job requires you to be able to use. You either learn how to use the tools that you need to use to do your job, or you get fired. No one freaks the hell out and is paralyzed when a switch or button is moved on a new model of power tool, why do we need to treat computer applications like black magic?

    3. Re:easy: your mom should grok it by obarthelemy · · Score: 1

      it depends on whether you're talking features or ergonomics. And of whether your app is *supposed* to be usable by all, or only by a select few. I can understand your point, but, also, there's a perverse developer pride in making something so complicated that barely anyone can use it. Complexity != power, nor versatility.

      It's OK to have features that very few users ever use. It's no longer OK though, if those "rare" features obscure the "frequent" ones. And, in my experience, oftentimes even barebones apps have big ergonomics issues.

      --
      The Cloud - because you don't care if your apps and data are up in the air.
  24. this is the curious case of Nathan Clevenger by nimbius · · Score: 2

    who has accidentally occupied a desk at the offices of Infoworld for some time now. It all started 2 years ago when Nathan was formally accepted to 'synergy leverage monthly,' a publication of no real relevance to anyone but managers who have reached a point in management where they no longer speak in real sentences. That isnt to say the sentences are poorly structured or in an indeterminate language, its just to conclude rightly that these sentences are devoid of any logical meaning.

      Anyhow, Nathans expertise (synergistic strategization of pinged leverage potentials and service driven design paradigms in the web 2.0 echelon of modern business dynamics) while perfectly natural in the publication of SL monthly, serves poorly for infoworld. Infoworld staffers understand this, and try to cope with Nathan as best they can through the common medium of corporate lunch at the local diner or the occasional holiday party. Their hope is that at some point, SL monthly may realize, although highly unlikely, they are in fact missing a staff member during the morning hyper-power-concept core lunch strategy event and begin combing the halls before or after this tumultuous event for Nathan.

    --
    Good people go to bed earlier.
  25. Re:already in progress. iPads are the new laptops. by Anonymous Coward · · Score: 0

    I'm sitting here on my 68K workstation... name one good CAD system that runs on a consumer PC? There aren't any!

    Of course, that didn't stop the march of progress, did it?

    The reality is that all three of you using CAD systems do not comprise a big enough market to matter in any significant way. The world will move on to iPads, and eventually niche applications will migrate there as well, just as happened with x86 PCs back in the day.

  26. Anyone remember what the "P" in PC means? by michaelmalak · · Score: 1

    From my 1970's/1980's perspective, everything started at as consumer technology. The "P" in "PC" stands for "personal computer" -- the PC was IBM's entry into the market to compete against the home computers of the Atari 800, Apple ][, and Commodore 64. To this day, I have this stereotype stuck in my head, and when I think my hotel reservations, bank account info, brokerage account, etc. are probably being handled by Windows or Linux servers I can't help but think, "I can't believe they're storing all this information on just home computers." -- even though I know they have redundant power supplies, redundant storage, clustered servers, replicated data, and probably fallback servers in geographically distant locations.

    I guess the big exception came shortly after the PC: the LAN. Novell was not a consumer product nor did it have a direct consumer predecessor. But even there, if you take just a slightly broader view, personal computers had file sharing and e-mail before Novell existed -- just that it was in the form of BBS's. Consumers at the time didn't care about sharing within their home because they had only one computer and even if a friend brought over a second one, there was sneakernet for files and the human voice instead of e-mail.

    Now someone slightly older than me may very well take the attitude that in the mainframe & minicomputer world everything started out commercial. And evidently the case is similar for the younger generation. But from my perspective, everything's a home computer.

    1. Re:Anyone remember what the "P" in PC means? by glwtta · · Score: 2

      The "P" in "PC" stands for "personal computer"

      What does the "C" stand for?

      --
      sic transit gloria mundi
  27. Burned at the Stake by Danathar · · Score: 1

    In a dictatorial regime heretics are burned.

    In a company with a top down command structure those that violate policy without regard will be fired. That's not saying that new technology will be stifled, but to say that the policy will change to accommodate the new technology. The old gaurd will take up positions within the new regime as fast as you can sneeze. Already iphones and ipads in my organization are being hamstrung by old security wonks that were vocal against anything but blackberries. Now they propose completely managed Ipads and Iphones and they very well may get it.

  28. Between a rock and a hard place. by jenningsthecat · · Score: 2

    This puts IT departments into a difficult and often untenable position. On the one hand, their users are clamoring for the latest gadgets to be integrated into the company's business tech. On the other hand, new devices may represent major security holes, or best practices for their use and integration may not yet be established.

    If some new device results in a system crash or a security breach, it'll be the IT people whose jobs are on the line, not the user who insisted on using the new device.

    --
    'The Economy' is a giant Ponzi scheme whose most pitiable suckers are the youngest among us and the yet-unborn.
    1. Re:Between a rock and a hard place. by Anonymous Coward · · Score: 0

      IT has to change, this is just part of the wave. We need to understand that users do not and should not have to care about what we do in the back-end. They just want simple solutions that work, when they want it, how they want it, and with no "mother may I?" to IT. We can be out in front giving it to them or stand in the unemployment line when they get tired of us being in the way.

    2. Re:Between a rock and a hard place. by Anonymous Coward · · Score: 0

      Absolutely, 100% correct. Then, if it's a major breach or HIPAA violation resulting in patient information being disclosed, the PR flack will tell the news orgs that the IT employee who was responsible for security (not his boss, the CIO of course) on personal devices was terminated.

  29. Just read the author bio by MattyMatt · · Score: 1

    "Nathan Clevenger is the author of "iPad in the Enterprise: Developing and Deploying Business Applications" (Wiley Publishing, 2011) and has been developing mobile software for more than 12 years. In addition to his role as enterprise editor for iPhone Life magazine, he is the chief software Architect at ITR Mobility, a management and IT consulting firm."

    What a load of crap.

  30. Hard time finding interesting work .... by Cutting_Crew · · Score: 1

    I had a hard time finding work before this job that I have now. Companies still want and operate against technologies such as BEA TUXEDO(i had to look that up because I had never heard of it before), VBA Access / MS SQL 2008, MFC(MFC??? "Really?!", I said to myself. "Microsoft doesn't even support it anymore"). Other skills of epic proportions included excel, crystal reports, clearcase, fortran...yes ALL IN ONE job posting. I am telling you, there are jobs like this everywhere. EVERYWHERE. Sooner or later business clients are going to wake up and realize that they can run more smoothly with the latest technological advances and the companies not investing in infrastructure for future client growth or to even keep their existing contracts will go out of business.

  31. Press hit by Anonymous Coward · · Score: 0

    This reads like a cross between an advertisement and some wishful thinking.

    It's not arrogance to want to control what is allowed on the network, it's fucking common sense.

  32. Have you ever worked with end-users? by khasim · · Score: 1

    Yes, IT is holding back the end-users and their iPads.

    ... and ...

    It's always the end-user's responsibility to safeguard data, whether it's on their iPhone or printed out in their briefcase.

    No. There is a HUGE difference between physical documents and electronic files. The end-user cannot be relied upon to know how to make sure all the copies of a document are deleted from their toy-of-the-month. Nor can they be relied upon to perform the necessary actions even if they did know.

    IT, by trying to be in control of everything, insists on disempowering users by refusing to allow them to use any such devices.

    You have not yet demonstrated that the end-users know how to use such devices within the security standards of their employer.

    It's false security. It costs more than the problem you're trying to prevent. Give the user an encrypted container and show them how to use it and tell them that's where all business data goes.

    How does it cost more?
    Without some means of verification, you will be relying upon the users' knowledge. I think it has already been established that the end-users do not have the same level of knowledge as the IT department does.

    1. Re:Have you ever worked with end-users? by Anonymous Coward · · Score: 0

      I remember an article I read in a dead-tree magazine some time back, (I forget where or I would try and link it). It was a profile of the security measures used by Iron Mountain in it's courier routes of drivers picking up confidential paper files for storage or destruction. The part that stuck out for me was that they had spent time determining where they needed to eliminate or limit the ability of humans to make decisions, (read: mistakes) and where well-trained employees' discretion and involvement enhanced security.

      I think IT spends too much time on the "trained employee" part of things and not enough time thinking how we can structure things to make the secure way also the easiest way. For example, don't wait for them to figure out how to access their email from their iPad to educate them about security, implement a secure container system like Good and tell everyone, "If you want to use your iPad to access work email, go to this website to set it up." Use Citrix or TS Gateway to give them auditable, controllable access to work apps and data.

    2. Re:Have you ever worked with end-users? by IrrepressibleMonkey · · Score: 1

      For example, don't wait for them to figure out how to access their email from their iPad to educate them about security, implement a secure container system like Good and tell everyone, "If you want to use your iPad to access work email, go to this website to set it up."

      The problem with Good is that it doesn't actually integrate with the user's device - it sits on the top like an unsightly wart. We implemented it in our company and the initial "great, I can get email on my iPhone and iPad" has quickly turned into "why can't we have proper email and calendar access?" Usage (traffic) levels have fallen by more than half, but our licensing costs remain absurdly high for a product that offers little more than webmail on iOS. To me, this is the danger of the consumerization conundrum - if you attempt a half-assed compromise solution, you risk wasting money on a solution that no-one actually wants and users continue to search for holes to exploit.

  33. What 'Consumerization of IT' Really Means For IT by Anonymous Coward · · Score: 0

    It means corporate data walks out the door. Period.

  34. Ah obviously your not an admin by Falconhell · · Score: 1

    If you dont know that users are incredibly stupid you should hand in your geek card and leave Slashdot.

    If IT is responsible for security so they have every right to be a law unto themselves, as THEY will be held responsible for the secutiry braeches that follow.

    I am guessing you wanted to do something stupid and are pissed because IT told you to F off.

  35. Re:Consumer devices are not ready for enterprise.. by HideyoshiJP · · Score: 0

    There's a lot of hoopla on the mobile device management front. Apple has the iPhone configuration utility that allows you to create profiles you can use to lock the end user down. As long as you've got the policies down on paper, you can put safeguards in place to secure the data on end-user devices and remotely wipe it if said devices are stolen.

  36. Couple of items ... by khasim · · Score: 1

    Complete agreement. But I think some editing would help your case.

    Second, complaints that the users are undermining IT perfect systems by buying devices or installing software. Basic economics tells us that users are investing money and time in these thing because they deliver value. Value that It is not delivering to a demand from their user base.

    ... and ...

    Fifth, the wireless access point anecdote highlights appalling sysadmin practices. One point of access into the network and the bad guy was able to destroy critical infrastructure. Way to put all your eggs in one basket. The sysadmin of that network was incompetent, negligent, or both. Yes, the user did something stupid. But the real fool was the the person who did not design for defense in depth.

    Funny how those two (almost contradictory) statements go together, isn't it?

    The users have to be allowed to put whatever they want on the network because it adds value for the user but IT has to make sure that anything added to the network is correctly shielded and monitored. Even though a single weak point is all that the bad guys need to wreck havoc.

    Basic economics tells us that users are investing money and time in these thing because they deliver value. Value that It is not delivering to a demand from their user base.

    Note how the gp phrased it as "value" instead of "business value". Gaining status by having the latest toy does nothing for the business.

    If the new item has so much value FOR THE BUSINESS then the person wanting the new item should have no trouble presenting a business case to upper management to increase IT's budget to support said new item.

    As you noted, a $20 wireless router can punch a very expensive hole in a very expensive network.

    Where's the business case from the guy adding it? Where's the approval?

    This is simply a case of demand everything and refuse to take any responsibility for any failures caused by the user NOT having the knowledge that he thinks he has.

  37. Remote Wipe by bobstreo · · Score: 1

    If their job requires using that device, their employer should supply the applicable device.

    If they want to use a personal device, they should sign off that their system can be remote wiped if access issues/loss of system/loss of job
    occurs.

    I'd vote for total wipe if it's a personal device.

  38. One Question..... by Anonymous Coward · · Score: 0

    How will this figure into security requirements. I know in our organization a lot of users are getting upset because they are losing a lot of the freedom they've had for years so that the company can become PCI Compliant.

  39. Re:Consumer devices are not ready for enterprise.. by jon3k · · Score: 1

    You really should take a look at the Mobile Device Management (MDM) platforms. I recommend checking out Air-Watch and MobileIron specifically. You can, among other things, require devices to have passwords and meet complexity requirements. What we need to do is stop saying "we can't do it" and take a realistic look at how we can.

  40. History repeats itself by Just+Brew+It! · · Score: 1

    It is sort of like the mainframe to PC transition all over again.

    But in an odd twist, we're also coming full circle. Many of the apps that make the iPad and iPhone such compelling tools rely on massive server farms in remote data centers. "The Cloud" is in a sense the modern equivalent of the mainframe.

    1. Re:History repeats itself by biodata · · Score: 1

      Would mod up if could. The ipaderisation of corporate IT means moving all the real work back onto the servers, locking everything down, and limiting what users can do to web browsing. Delivering web pages that can do everything users need to is the thing. The ipad is great for web browsing I think, though I prefer a laptop so I can have a real word processor and spreadsheet to work when there is no internet connection.

      --
      Korma: Good
  41. Re:Consumer devices are not ready for enterprise.. by Alyred · · Score: 1

    Yeah, this is what we're currently using. However, it still feels pretty rudimentary and "bolted on", not really a part of the overall plan from Apple.

    It would be nice if they built in the enterprise stuff a little more core to the OS, and just left it "turned off" for consumers. Then, if you're an enterprise, you can more closely integrate it into the environment.

    It would also be nice to not have to use iTunes to do fine-tuning on the configuration, especially how they tie a device to a computer/Apple store account.

  42. Re:Consumer devices are not ready for enterprise.. by HideyoshiJP · · Score: 0

    I'll agree with you there. My organization has been evaluating third party solutions to give us some more manageability and support across multiple platforms.

  43. Re:Consumer devices are not ready for enterprise.. by Alyred · · Score: 1

    Oh, not saying we can't. We're using the BlackBerry Enterprise stuff quite well, and are moving into the Apple and even Android areas.

    It just gets difficult when we have a user come up and state, "I just bought personal Device XYZ and want you to hook it up to your network." We haven't tested, don't know that particular OS's layout, etc.

    And some devices you just can't, for sake of policy reasons, etc. At least not yet. Lotus Domino is JUST NOW beginning to support full push to Android, and we're still in the testing phases. But users are always wanting to get their latest device up on the system, then have us support it sight unseen.

    Thanks for the tips for air-watch and Mobileiron, however. Mobileiron looks a bit... pricey (I always get a bit turned off when I go to their "pricing page" and it's a contact form for permission for a salesperson that will never give me a moment's peace) and Air-watch.com isn't coming up...

  44. Bullshit by CAIMLAS · · Score: 1

    Increasingly, IT has been moved from "enablers of capability" to "untrustworthy and ineffectual geeks in a closet". It's been going this way for years, and the trend is clear.

    This article just lays it out in a fairly unclear, rambling fashion. The concept held for IT is pretty clear, none the less.

    Who's to blame? Personally, I put it on IT and application consulting firms who back their pretty weasel words with... more weasel words. They promise the sky, and due to the timeframes involved and the complexity and scope of the projects, tend to make off like bandits. They do a 90% implementation of 80% of the problem and consider it a success. "Computer people" end up looking poorly. Naturally, it falls on the shoulders of the "computer people" left to maintain systems, "IT". IT gets the blunt of it, and the scope and number of problems often faced by IT is neither seen or understood by those around them. We're left to clean up the problems of myriads of programmers, poor business decisions, and reckless users. The appreciation we get for this is unreasonable expectations and short responses. (Where did they get the expectation that these things should "just work", as evidenced by their short responses and irritability, I wonder? Certainly not from experience, because it's never really been that way.)

    By all means, make the applications simpler and remove user control. This reduces functionality, eliminating risk. The tradeoff is that the users (already encumbered by limited intelligence, judgement, or otherwise in many cases) have limited utility in their applications. For most, this is fine. Bumble on through the work day!

    I've seen this reoccurring problem in a half dozen major industries in the last decade. People do not treat their mailman or their plumber with such rudeness. They don't treat the guy coming to redo their household wiring this way. Why, in a prefessional capacity, do they treat their IT people this way? We're required to have personalities which programmers are not, yet have to have a much broader skill base to be successful than a typical programmer (scripting? misc. esoteric systems? Unix and Linux - and Windows? TCP and WPF? Sockets and pipes?). Yet we're allotted a lot less esteem or regard as people.

    Time for a 'career change', I think. But: where to? That's what I want to know. Where does the technically adept, intellectually curious (and, currently, fairly drunk) person go?

    --
    ~/ssh slashdot.org ssh: connect to host slashdot.org port 22: too many beers
    1. Re:Bullshit by biodata · · Score: 1

      A 90% implementation of 80% of the problem sounds like a great success. Write me down 100% of the whole problem, never change your mind, never change the problem, and never change anything else, and you might be able to legitimately complain that you didn't get 100% of a solution. If you poorly define a problem which in itself changes during the execution, and you still expect 100% of a solution, then the problem lies in your expectations.

      --
      Korma: Good
    2. Re:Bullshit by biodata · · Score: 1

      Forgot to add.. your abundance of 'personality', along with drinking skills, should fit your for the senior manager role I think.

      --
      Korma: Good
  45. Consumer-grade services by Animats · · Score: 1

    Consumer devices are fine. It's consumer-grade services that are the problem. If corporate users have devices that are slaves to a consumer-grade service like Apple's or Google's, they can be attacked or disabled through that service. Typically, there's no contractual recourse available.

    Microsoft is more careful about this. They offer corporate control over Windows Update. If your corporate apps stop working because Apple pushed an iPhone update, you have no recourse.

    1. Re:Consumer-grade services by synapse7 · · Score: 1

      I don't think consumer devices are fine at all from a support standpoint. Has anybody here tried to fix a legitimate problem on a Mac, the OS is not friendly to try to correct when the issue is deeper than switches and checkboxes, such as a corrupt index for one example. Also, has anybody tried replacing a screen on a mac product, compared to replacing parts a Dell precision laptop. Usually I see mac products working as an expensive dumb-terminal where the user needs to connect to terminal services to do most of their work anyways.

  46. Why do we still have passwords??? by tonywestonuk · · Score: 1

    I have conducted user training on password complexity.

    Then I did a password audit a few months later and the percentage of users using "password123" or a permutation of that had declined from 20% to 18%.

    Disempowring them, was, unfortunately, the only effective solution.

    Everyone hates them, the monthly change of password to something that hasn't been uses the last umpteen times, for the sake of security.

    A fingerprint reader can be purchased for $50..... So, why, still do the IT departments want to put their staff through the password mangle??

    1. Re:Why do we still have passwords??? by SecurityTheatre · · Score: 1

      Implementing biometric authentication systems is not easy. Sure, you can log into your laptop easily enough, but can that be federated to your SAP solution, or the business intelligence suite in accounting, or the HR suite in marketing.

      Since there are no good standards for federating those services, most often, they rely on things like NTLM challenge-handshake authentication, which necessarily, requires a password.

      Even if you don't enter the password and have it in some sort of keyring that is only accessed by your biometric swipe, it's still there and distributing those to end-users is difficult. And what happens when you need to use Bertha's computer because yours isn't working properly? The common corporate directory based solution such as Active Directory, LDAP, NetWare, etc, don't support biometric data, necessarily, because there isn't a real standard on how to transmit it. What does a fingerprint look like, on the wire, and what standard define's its description? What is to stop me from intercepting that and replaying it, which is another issue of passwords?

      At current, the biometric systems implement proprietary protocols for handling that. While I would love to see someone sponsor a standard (perhaps there is one I don't know about, I didn't check - it's not well known anyway), there won't be a way to federate those authentication credentials.

      Keep in mind, in an organization, there are dozens of authentications happening for many sessions you use. There are machines establishing token trust with each other, there are services establishing the same. Your computer is talking to probably two dozen servers during a normal work day and they aren't all running the same operating system (usually). In fact, those communications are probably taking place over half a dozen different protocols, depending on what you're doing.

      Kerberos is one option, but is fairly rarely supported and generally requires additional hardware, etc to implement. I'm sure there are others, but the point is that it's a very difficult problem and is most economically solved by maintaining status quo. Of course, if you have lots of money and expertise and the ability to custom design all of your various software services, you can implement anything you like from SAML to Kerberos, to OpenAM, etc. Making it work is another issue.

      Additionally, commodity fingerprint scanners suck. Go check out the mythbusters on that topic. :-)

      There are still huge hurdles to having the good technology. Sure, we can say "well fuck, why don't we make it?" but it just hasn't happened yet, so the IT staff has a limited subset of tools they can play with and passwords

    2. Re:Why do we still have passwords??? by SecurityTheatre · · Score: 1

      That first sentence (having read it again) is full of fail. SAP, marketing suite, or HR solution, certainly not marketing your HR data or using SAP for something other than business intelligence. :-)

  47. So Arrogent...but, typical of todays IT department by tonywestonuk · · Score: 1

    A user has asked for Airprint to be supported. a quick google search of "windows airprint", gives instructions how to do it. its an easy fix.

    However, you rather tell your users they should be using windows 7 instead.

  48. Worse then sheeple, Corporate Sheeple by Anonymous Coward · · Score: 0

    The one thing people don't realize (corporate people) is new tech means more administrative overhead which means more people. They try pulling this shit on me all the damn time. In reality is fails spectacularly ~50% of the time (lost data, customer info get nabbed, idiot removed encryption, etc) the other half it becomes a new toy that doesn't do anything productive (angry birds).

    When corporate wants to get lean and mean (god I hate that term) tell them to get out of your way, backseat driving by sheeple never ends well.

    PS: Andriod is far more suited to actual production as iOS prevents you from moving content to and from a secure server easily or even between applications. Apple's "security" in iOS prevents application from talking to each other so no file transfer app for you.

  49. Re:So Arrogent...but, typical of todays IT departm by hawguy · · Score: 1

    A user has asked for Airprint to be supported. a quick google search of "windows airprint", gives instructions how to do it. its an easy fix.

    However, you rather tell your users they should be using windows 7 instead.

    No, you're reading too much into my post. I told him to come back to me when he has a corporate supported iPad (we do have some) since we don't allow personal devices on our internal network, and we'll help him make printing work. Unlike users, I have a regulatory mandate to protect our network from rogue devices.

    I certainly didn't recommend Win7 as a solution since 30% of the devices on our network run OSX (including the laptop on my desk).

    If the company is willing to relieve me of my responsibility to protect our network and abide by the regulatory policies that our company is subject to, then I'm happy to allow users to bring any devices they please and we'll put it on the network.

    The IT department isn't your enemy, we have a finite budget and have to meet all regulatory requirements (like SOX, HIPAA, PCI, etc), provide end-user support (even with the fad device du jour that is going to change the industry (I've got about 30 old tablet PC's sitting in storage after users decided they weren't the panacea they thought they were)), and do application support - even for cloud applications that supposedly need no support thus never have any suppport costs budgeted.

  50. This crap made me leave IT... by Anonymous Coward · · Score: 0

    Back in the mid 1980s I got into computing. I fully admit that I was one of those kids who watched Wargames and then asked for a modem for Christmas. I fell in love with computing and within a few years was all over all the local hacking BBS's and was writing my own war dialers, Trojans and crappy BASIC viruses. It was a blast and in retrospect it was a pretty awesome childhood.

    I started working in IT in the mid nineties mostly supporting OS/2 and DOS/Windows clients running NetWare. It was like a dream job. I'd get to work on computers all day at work and get paid for it and then go home and read Phrack and other zines and textfiles and I could write ANSI bombs and other retarded but ultimately enjoyable garbage. Unfortunately in the late nineties the IT market was flooded with MCSE holding newbs who wanted some of the "get rich quick" IT pie. I seriously thought many times about leaving IT but for whatever reason (probably the need for a steady paycheck) I stuck with it.

    Fast forward to the summer of 2009. The consumerization of IT is in full swing and I am forced to be supporting executives home laptops that they want to bring in and hook up to the corporate network and other such bullshit. So I finally said fuck it and quit working in IT and got a job as an apprentice electrician. I am soooooo fucking happy nowadays. I have an interesting well paying job and computing has gone back to being a fun hobby that I can do in my free time. I am wondering how many other people have been experiencing the consumerization of IT and all the associated hassles and are just saying fuck it and leaving the industry?

  51. Suddenly its 1980! by Anonymous Coward · · Score: 0

    Back in 1980 the world of Data Processing (what we now call IT) was shaken to its core when corporate managers and professionals brought their Apple IIs and TRS 80s to work and used Visicalc (the first spreadsheet program) to process their own data the way they wanted.

    They did so because Data Processing was a highly structured activity where new ways of presenting data required going through an expensive and extensive multi-step procedure which the use of spreadsheets avoided.

    The result was chaos. I attended meetings where multiple spreadsheets -- purporting to report on the same activity -- were handed out by the participants, but where the reported data was not only different but contradictory.

    It took several years for IT and the rest of the corporate world to reconcile their differences and arrive at suitable compromises.

    The only significant difference I see is that security is now a major issue which was not the case in 1980.

    The most reasonable solution for accommodating the managers and professionals is to proved them with data extraction programs which permit them to retrieve -- but not insert -- data and which limit their access based on security concerns. Let them pull the data out and store it in their own "sandboxes" and manipulate how they want.

    Jerry

  52. Security is the largest change by trevelyon · · Score: 1

    Most companies discovered a while back that using web apps and standards (IMAP, non-ie specific HTML and CSS, etc) pays off in the long run. Adding mobile devices to this environment really only requires adjustments to the existing infrastructure (a new CSS for the mobile form factor, security policy updates and tool addition, etc) the largest changes likely being in the realm of security. The new smaller form factor and portability takes the old risk of loosing the data access device and all it's locally stored information, including cached data, and increases it. Additionally, many of the new devices lack some of the protection mechanisms of a full blown laptop (encrypted filesystems, logins, VPN clients, etc) increasing the overall security risk. And finally, the need to ensure important data is backed up and recoverable is still in effect. Companies wanting to bring consumer devices into the enterprise need to adjust the security policies to match the new risks and ensure that the new devices comply with the security policies.

    The article seems to be written by something of an Apple fanboy that seems to feel the Ipad and Iphone bring epic new functionality to the enterprise. I have a hard time seeing these new gains. From my perspective they have improved the interface enough to make it much more comfortable for users to access enterprise data on smaller devices. That doesn't drastically change what IT depts. have been doing for years, it merely means they need to update their policies and craft solutions to ensure the new devices are in compliance. Not much different than when notebooks, sub-notebooks or blackberries were implemented IMO.

    I see a much larger issue being the mixing of employee provided devices with company provided devices. Lately, as companies struggle to contain their costs more, this is more and more common. Managing security, delimiting what each party owns (who owns the phone number) in this mixed ownership environment is an ongoing challenge for today's enterprises, one they've been struggling with for sometime and one which few companies truly understand the real cost of.

  53. Need vs Want by Anonymous Coward · · Score: 0

    Everyone wants the new latest and greatest toy but in reality they do not need it. I've been in countless meetings where people bring their iphone, ipad and laptop. You do not need these devices you want them and frankly they are a hindrance most of the time. Doctors or people who are moving around all day I defiantly agree could benefit from being highly mobile but your average office worker or management do not need them.

    Companies would benefit from rolling out more beneficial products like data warehouses and business intelligence. Moving from old legacy applications to new modern applications that are easier to support and secure. Rarely do companies want to go back and fix their old products or upgrade money would be better spent there instead of people having iphones or Ipads..

  54. Ironically... by Anonymous Coward · · Score: 0

    The arguments against the position taken in the post effectively explain, and provide support for, why IE6 is still so commonly used in the "enterprise." The same slowness and lack of acceptance that has caused IE6 to last so long is exactly what some /.ers are now defending as good IT practices. To say this is disappointing is putting it mildly.

  55. Re:Consumer devices are not ready for enterprise.. by Anonymous Coward · · Score: 0

    All you've presented is why the users aren't ready to use "enterprise" IT. I assume you're one of the companies that still uses IE6 as the standard browser and refuses to officially support anything else...

  56. Re:Consumer devices are not ready for enterprise.. by jon3k · · Score: 1

    I had the same problem with MobileIron. In fact, for smaller deployments I'd be really concerned, because they won't sell licenses in blocks smaller than 100. Air-Watch is more reasonable and upfront about their pricing. I appreciate that you might have compatibility issues that preclude you entirely from using specific mobile devices, every case is different. We have a volume of devices, and a support staff large enough, that we're capable of supporting multiple different device platforms.