Slashdot Mirror
IT Admin Trashes Railroad Company's Network Before He Leaves (bleepingcomputer.com)
Catalin Cimpanu, writing for BleepingComputer: A federal jury in Minneapolis, Minnesota found a local man guilty of intentionally damaging his former employer's network before leaving the company. The man's name is Christopher Victor Grupe, 46, and from September 2013 until December 2015 he worked as an IT professional for the Canadian Pacific Railway (CPR), a transcontinental railroad based in Alberta, Canada. Things went sideways in December 2015 when CPR suspended Grupe for 12 days for yelling and using inadequate language with his boss. When the man returned to work following his suspension on December 15, management told Grupe they were going to fire him for insubordination. According to court documents obtained by Bleeping Computer, Grupe asked management to resign, effective immediately. He promised to come back the following days and return company property such as his laptop, remote access device, and access badges. He did return the items, as promised, but not before taking the laptop for a last spin inside CPR's network. Court documents show Grupe accessed the company's switches and removed admin accounts, changed passwords for other admin accounts, and deleted log files. When done, Grupe wiped his laptop and returned it to CPR's Minnesota office on December 17, two days after he resigned.
Why do you leave somsone's access privileges in place when you're in the middle of firing them?
IMHO, they deserved what they got.
*before* you tell someone you're going to fire them.
"According to court documents obtained by Bleeping Computer, Grupe asked management to resign..." What was management's answer when asked to resign? Did they?
"...using inadequate language..."
ITYM "inappropriate."
"National Security is the chief cause of national insecurity." - Celine's First Law
IMHO, they deserved what they got.
"...using inadequate language..."
I never realized it before now, but I have exactly that problem, inadequate language to deal with my boss
So reading through the article, it looks like he was smart enough to get rid of the records of his access on the logging servers, but got caught because he forgot to clear the logging buffers on the network gear.
Hope it was worth it!
"We've found you SO insubordinate that we have to FIRE you from the company. But yes, we trust you Mr NetAdmin, to take your company laptop home with you."
Jesus. He's in trouble, but I hope for humanity's sake THEY didn't reproduce.
-Styopa
Really ? They call him a "Professional" ? On what basis ? Professionals do not scream at other people and use profanity, let alone to their bosses. And when professionals understand that their services are not wanted, they just leave quietly unless their opinions are explicitly wanted, at which point they can criticize their superiors skills or lack there of, using a proper language. Trashing an ex-employer's equipment is childish at best. Far from being a professional. Regarless how bad your management may be. Definitely in the list of "Absolute no-no's" of a professional.
__________
The more I know people, the more I love animals
... suspended Grupe for 12 days for yelling and using inadequate language with his boss.
So, he wasn't rude enough?
It must have been something you assimilated. . . .
That he was arguing over their shoddy security practices and management didn't care. /s
First off they didn't revoke his access keys immediately after firing him/letting him resign - for INSUBORDINATION of all things
Then it took them 3 weeks to figure out anything had been done, almost a day to figure out they just had to reboot the switches and then they had to call in specialists to figure out how to check the switch logs.
And boy howdy he sure showed them!
I mean, I've been in I.T. for about 30 years now and I know there's really nothing "good" that will come of trying to mess up the corporate networks or computers on your way out the door if you're let go.
But that said? This article really doesn't tell us anything about what the guy was angry about? If you're screaming at your boss, that tells me one of two basic things. Either A) you're just that unprofessional and have anger issues, or B) the company is doing something SO wrong, internally, that they've created a situation where YOU could become the "fall guy" for major problems set up to happen, and you have reason to confront them angrily.
(Even if option B is true? This assumes you've already exhausted other avenues to get your message across.)
I agree though. This railroad obviously has shoddy H.R. policies for handling terminations, in any case. Why would you let someone back onto your network once you terminated them?
Why, because of his exemplary professional behavior? Also, who would be insane enough to hire him now?
Equifax Argentina division, he would most likely do a bang up job securing their servers. At least he knows how to effectively lock down and change admin passwords in a Windows server setup which is a skill that seems to elude Equifax IT specialists.
This message was not sent from an iPhone because Peter Sellers really was a deviated prevert without a dime for the call
The rail road should consider itself lucky it got off with just this much damage. It could have been a lot worse.
sed -e 's/Chuck Norris/Rajnikant/g' joke > fact
It takes two to make a squabble. If you're the company and you're going to fire someone that has access to critical network and server infrastructure, you cancel all of their access and security privileges immediately - it's never a good idea to practically allow the terminated employee to royally fuck things up for you. If you're the IT pro, you don't use access IDs and tokens with your name attached to them - that's just like robbing a bank, calling the cops with your own personal cell phone, and telling the cops that show up that you're guilty.
Aside from the things the company did wrong (and firing network admins is always difficult), the real stupid move in this story is the sabotage.
This guy will likely never get hired as an IT staffer again. Sure the company was going to fire him, but in the modern world of "All we can confirm is that he was employed here from X to Y" his reason for departure was going to be an interview question, not something that was going to come up in reference checks. Now even ignoring that searching for his name is going to bring this up, he can't network for jobs with anyone he worked with, anyone who know those folks, and probably out to the second degree.
I guess that's one way to make sure you follow through on your dreams of a career change.
fencepost
just a little off
If doctors were treated as badly as IT, a lot more people with be afraid to go to the hospital.
You know you are a racist asshole, right?